Live › vulnerability › CVE-2026-114191
Go to dashboardThe Knit Pay UPI QR Code Payment Gateway plugin for WooCommerce has a missing authorization check, so requests can reach functions that should be restricted. The sources do not say which function or what data or actions an attacker gains.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 14:48 UTC. All times on this page are UTC.
Sites running the Knit Pay UPI QR Code Payment Gateway for WooCommerce plugin at version 1.6.3 or earlier. The sources do not say which store configurations expose the flaw. Stores that do not have this plugin installed can skip it.
No product ranges from the sources yet.
wp plugin get upi-qr-code-payment-for-woocommerce --field=version1.6.3 once the vendor publishes one (the sources do not name a fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-114191")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.