PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module

• CVE-2026-16272 Critical 9.1 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.2%
• CVE-2026-16037 High 7.5 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.4%
• CVE-2026-16025 High 7.5 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module 0.5%