knit-pay vulnerabilities

CVEs whose affected-version data names the knit-pay package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112821Medium· 6.5

today

WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from n/a through 9.6.3.0.

▾ SunlitKnit Pay · knit-payvia CVEORG