CVE-2026-57717

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

Knit Pay plugin version 9.6.0.0 and earlier has a broken access control vulnerability without authentication. An unauthenticated attacker can gain unauthorized access.

Risk Assessment

The organization is at risk of unauthorized access to payment functions and financial data.

Recommendation

Immediately update the Knit Pay plugin to the latest version.

Other vulnerabilities in Knit Pay

CVE-2026-49070High
In Knit Pay versions <= 9.4.0.0, there is an unauthenticated broken access control vulnerability that may allow unauthorized users to access resources.

Original NVD description (English source)

Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.