KnitPay
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Razorpay Payment Links for WooCommerce | 2 | – | Sep 30, 2026 |
| Knit Pay | 1 | – | Jul 23, 2026 |
| Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more | 1 | – | Sep 25, 2026 |
| UPI QR Code Payment Gateway for WooCommerce | 1 | – | Feb 20, 2026 |
Exploited and recent CVEs
- CVE-2026-97299 WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability <0.1%
- CVE-2026-89426 Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field 0.5%
- CVE-2026-57717 WordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-57424 WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-67969 WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability 0.3%