PatchSiren

Knit Pay CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Knit Pay CVE published 2026-06-25

CVE-2026-56023

A vulnerability in the UPI QR Code Payment Gateway for WooCommerce plugin, version <= 1.6.2, allows for broken access control. This CVE was published on 2026-06-25T14:16:50.490Z and was last modified on 2026-10-25T23:10:00.167Z.

HIGH Knit Pay CVE published 2026-06-15

CVE-2026-49070

CVE-2026-49070 is a HIGH severity vulnerability in the Knit Pay plugin, affecting versions <= 9.4.0.0. The vulnerability is caused by unauthenticated broken access control, which has a CVSS score of 7.5. The vulnerability was published on [cve-org] and additional details can be found on [nvd].