Skip to content
Threat Feed
Subscribe

Vendor

Knit Pay

2 briefs RSS
high advisory

Knit Pay UPI QR Code Payment Gateway: Missing Authorization Vulnerability (CVE-2026-114191)

A missing authorization vulnerability exists in the Knit Pay UPI QR Code Payment Gateway for WooCommerce plugin, affecting versions from n/a through 1.6.3. The vulnerability allows for the exploitation of incorrectly configured access control security levels.

UPI QR Code Payment Gateway for WooCommerce
1c
high advisory

Privilege Escalation in Knit Pay WordPress Plugin

The Knit Pay WordPress plugin allows authenticated users to achieve privilege escalation to administrator via insecure role assignment handled by the Gravity Forms integration.

Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more
1r 1t 1c