Unauthenticated Access Control Issue in Knit Pay by WordPress
CVE-2026-57717

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Knit Pay
Vendor
CVE Published:
23 July 2026

What is CVE-2026-57717?

The Knit Pay plugin for WordPress has a serious vulnerability that allows unauthenticated users to exploit broken access control mechanisms. This flaw affects all users operating on versions up to and including 9.6.0.0, potentially enabling unauthorized actions and access to sensitive functionalities within the plugin.

Affected Version(s)

Knit Pay <= 9.6.0.0

References

https://patchstack.com/database/wordpress/plugin/knit-pay...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Riyas M S | Patchstack Bug Bounty Program
.