Knitpay 5 CVEs across 4 Knitpay products. Browse Knitpay vulnerabilities, severities, and proof-of-concept exploits.
Knitpay products with known CVEs Knitpay CVEs — newest first CVE Severity Score Published Summary CVE-2026-97299Medium 5.42026-09-30 Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions. CVE-2026-89426High 8.82026-09-25 The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including… CVE-2026-57717Medium 6.52026-07-23 Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. CVE-2026-57424Medium 6.52026-07-13 Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control S… CVE-2025-67969Medium 6.52026-02-20 Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Co…