Paymenter vulnerabilities
7 published CVEs name Paymenter among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-71537
Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
Paymenter · Paymenter
Medium6.5 - CVE-2026-55219
Paymenter: Race condition in payWithCredit() enables credit double-spend
Paymenter · Paymenter
Medium5.3 - CVE-2026-47198
Paymenter: URL parameter injection bypasses paid plan limits at checkout
Paymenter · Paymenter
High8.5 - CVE-2026-44585
Paymenter: Broken object level authorization via service reference manipulation on ticket creation
Paymenter · Paymenter
Medium5.4 - CVE-2026-44583
Paymenter: Blind Unauthenticated SSRF on the Paypal gateway module
Paymenter · Paymenter
Medium5.3 - CVE-2026-44584
Paymenter doesn't reset email verification status after email change
Paymenter · Paymenter
Medium4.3 - CVE-2025-58048
Paymenter Vulnerable to Remote Code Execution via Public File Uploads
Paymenter · Paymenter
Critical10.0