PPaymenter

Products

Exploited and recent CVEs

• CVE-2026-71537 Medium 6.5 Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade) 0.3%
• CVE-2026-55219 Medium 5.3 Paymenter: Race condition in payWithCredit() enables credit double-spend 0.2%
• CVE-2026-47198 High 8.5 Paymenter: URL parameter injection bypasses paid plan limits at checkout 0.4%
• CVE-2026-44585 Medium 5.4 Paymenter: Broken object level authorization via service reference manipulation on ticket creation 0.3%
• CVE-2026-44583 Medium 5.3 Paymenter: Blind Unauthenticated SSRF on the Paypal gateway module 0.4%
• CVE-2026-44584 Medium 4.3 Paymenter doesn't reset email verification status after email change 0.2%
• CVE-2025-58048 Critical 10.0 Paymenter Vulnerable to Remote Code Execution via Public File Uploads 0.4%