Knit Pay vulnerabilities

The Knit Pay plugin contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 9.6.3.0.

Knit Pay plugin version 9.6.0.0 and earlier has a broken access control vulnerability without authentication. An unauthenticated attacker can gain unauthorized access.

In Knit Pay versions <= 9.4.0.0, there is an unauthenticated broken access control vulnerability that may allow unauthorized users to access resources.