PayTR Virtual Pos iFrame API WHMCS Module vulnerabilities
3 known CVE vulnerabilities in PayTR Virtual Pos iFrame API WHMCS Module, translated and rated.
- CVE-2026-16272Critical
A use of less trusted source vulnerability in the PayTR Virtual Pos iFrame API WHMCS Module allows exploitation of trusted identifiers. This issue affects versions from v9.0.0 before v9.0.3.
- CVE-2026-16037High
The PayTR Virtual Pos iFrame API WHMCS Module contains an observable timing discrepancy vulnerability, allowing black box reverse engineering. The issue affects versions from v9.0.0 before v9.0.3.
- CVE-2026-16025High
The PayTR Virtual Pos iFrame API WHMCS Module contains a vulnerability due to improper validation of specified quantity in input, allowing input data manipulation. The issue affects versions from v9.0.0 before v9.0.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS