CVE-2026-114191: Missing Authorization in Knit Pay UPI QR Code Payment Gateway for WooCommerce
Affects Knit Pay UPI QR Code Payment Gateway for WooCommerceSource CVE Database V5
Not known to be exploited · CVSS 7.5 High : patch Knit Pay UPI QR Code Payment Gateway for WooCommerce soon.
Data as of 10/24/2026, 16:08:18 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Knit PayUPI QR Code Payment Gateway for WooCommerce | Affected
| Fixed in– |
AI-suggested
Until an official fix is available, restrict network access to the affected plugin and monitor for suspicious activity related to unauthorized access attempts.
Description
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3.
Impact
An attacker can exploit the missing authorization to access sensitive information that should be protected by access controls. The confidentiality of data handled by the payment gateway may be compromised. There is no indication of impact on data integrity or system availability.