CVE-2026-57717
MediumCVSS 6.5Summary
Knit Pay plugin version 9.6.0.0 and earlier has a broken access control vulnerability without authentication. An unauthenticated attacker can gain unauthorized access.
Risk Assessment
The organization is at risk of unauthorized access to payment functions and financial data.
Recommendation
Immediately update the Knit Pay plugin to the latest version.
Other vulnerabilities in Knit Pay
See all- CVE-2026-112821Medium
The Knit Pay plugin contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 9.6.3.0.
- CVE-2026-49070High
In Knit Pay versions <= 9.4.0.0, there is an unauthenticated broken access control vulnerability that may allow unauthorized users to access resources.
Original NVD description (English source)
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS