Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more vulnerabilities
1 known vulnerability in Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more from KnitPay. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Knit Pay – Cashfree, Instamojo, Razorpay…: Improper Privilege Management
The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the `maybe_update_user_role()` function reading the target role directly from