PayTR Payment and Electronic Money Institution Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PayTR Virtual Pos iFrame API WHMCS Module | 3 | – | Sep 9, 2026 |
Exploited and recent CVEs
- CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.2%
- CVE-2026-16037 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.4%
- CVE-2026-16025 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.5%