Vulnerabilities / Knit Pay
Knit Pay vulnerabilities
Advisories WPSec published for Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more. Other sources may list more. Its attack surface: Knit Pay on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1311 | Knit Pay <= 9.6.3.0 - Unauthenticated Insecure Direct Object Reference via PayPal Order Creation and Capture | Medium 5.3 | 9.6.3.1 |
License: CC BY 4.0