PayTR Payment and Electronic Money Institution Inc.

Products

ProductCVEsExploitedLatest
PayTR Virtual Pos iFrame API WHMCS Module3–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-16272 Critical 9.1 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.2%
  • CVE-2026-16037 High 7.5 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.4%
  • CVE-2026-16025 High 7.5 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.5%