CVE-2026-114191
WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability
Knit Pay UPI QR Code Payment Gateway for WooCommerceNetwork & edge
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Reports 2
2 outlets mention it. Reports are not confirmation; each links to its source.
- 🚨 CVE-2026-114191 Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access ControTelegram: CVE Notify, 24 Oct 2026
- @suriq.io: CVE-2026-114191: Knit Pay's UPI QR Code Payment Gateway for WooCommerce plugin contains a broken access control flaw in versions through 1.6.3. No exploitation is confirmed. UpdateBluesky: CVE posts, 24 Oct 2026
Description
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3.
Text from CVE List
Affected versions 1
- UPI QR Code Payment Gateway for WooCommerceaffected: all versions through 1.6.3CVE List