{"id":"CVE-2026-112821","kind":"vulnerability","aliases":["CVE-2026-112821"],"related":[],"title":"Knit Pay WordPress plugin: missing authorization check exposes access-control bypass","description":"Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from n/a through 9.6.3.0.","summary":"Knit Pay, a payment plugin, lacks an authorization check on at least one function, so an attacker may reach functionality meant for privileged users. The sources affirm the flaw exists in versions through 9.6.3.0 but do not state the exact action an attacker can perform.","severity":"medium","cvss":6.5,"epss":0.00159,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["knit-pay","package","payments","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed Knit Pay version in the plugin list or the plugin's main file header, and compare with `9.6.3.0`\n- unknown for further checks: the sources do not name the affected endpoint or setting","fix":"- Update Knit Pay to a version later than `9.6.3.0` once a fixed release is published; the sources do not name the fixed version","status":"open","published_at":"2026-10-23T09:17:05+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:47:20+00:00","updated_at":"2026-10-25T03:47:20+00:00","category":"package","confidence":0.4,"triage":{"at":"2026-10-25T03:47:20Z","model":"claude-haiku-5-5","output":{"fix":"- Update Knit Pay to a version later than `9.6.3.0` once a fixed release is published; the sources do not name the fixed version","reach":"unknown","title":"Knit Pay WordPress plugin: missing authorization check exposes access-control bypass","impact":"medium","summary":"Knit Pay, a payment plugin, lacks an authorization check on at least one function, so an attacker may reach functionality meant for privileged users. The sources affirm the flaw exists in versions through 9.6.3.0 but do not state the exact action an attacker can perform.","category":"package","nicknames":[],"who_cares":["wordpress","payments","knit-pay"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unauthorized users may reach restricted payment plugin actions","analyst_note":"Find the vendor advisory or Wordfence record for Knit Pay to confirm the affected endpoint, required privileges and the fixed version; NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-112821","how_to_check":"- Check the installed Knit Pay version in the plugin list or the plugin's main file header, and compare with `9.6.3.0`\n- unknown for further checks: the sources do not name the affected endpoint or setting","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running Knit Pay at version `9.6.3.0` or earlier are in scope according to the NVD entry. The sources do not say which configurations or roles make an install exposed, so unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000624,"input_tokens":3351,"output_tokens":577,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112821':15A,18A '-2026':14A,17A '9.6.3.0':58B,96C 'access':10A,85C 'access-control':9A 'action':65B 'affect':90C 'affirm':51B 'allow':81C 'attack':41B,67B 'author':6A,32B,71C 'bypass':12A 'check':7A,33B 'configur':84C 'control':11A,86C 'cve':13A,16A 'exact':64B 'exist':54B 'exploit':82C 'expos':8A 'flaw':53B 'function':38B,44B 'incorrect':83C 'issu':89C 'knit':1A,20B,25B,74C,76C,79C,91C 'knit-pay':19B,78C 'lack':30B 'least':36B 'levels.this':88C 'may':42B 'meant':45B 'miss':5A,70C 'n/a':94C 'one':37B 'packag':22B 'pay':2A,21B,26B,75C,77C,80C,92C 'payment':23B,28B 'perform':69B 'plugin':4A,29B 'privileg':47B 'reach':43B 'secur':87C 'sourc':50B 'state':62B 'user':48B 'version':56B 'vulner':72C 'wordpress':3A,24B","nicknames":[],"mitigations":[],"who_affected":"Sites running Knit Pay at version `9.6.3.0` or earlier are in scope according to the NVD entry. The sources do not say which configurations or roles make an install exposed, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T09:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112821","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112821","severity":null,"published_at":"2026-10-23T09:17:05+00:00","modified_at":"2026-10-23T16:06:31+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-112821","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-112821","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}