Exposure of Paymenter

CMS, Ecommerce

13

exposure score

44

sites use

0

exploited

1

critical

CVEs

7 results

CVE-2026-44583MEDIUMPaymenter: Blind Unauthenticated SSRF on the Paypal gateway moduleEPSS 0.4%CVE-2025-58048CRITICALPaymenter Vulnerable to Remote Code Execution via Public File UploadsEPSS 0.4%CVE-2026-47198HIGHPaymenter: URL parameter injection bypasses paid plan limits at checkoutEPSS 0.4%CVE-2026-44585MEDIUMPaymenter: Broken object level authorization via service reference manipulation on ticket creationEPSS 0.3%CVE-2026-71537MEDIUMPaymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)EPSS 0.2%CVE-2026-55219MEDIUMPaymenter: Race condition in payWithCredit() enables credit double-spendEPSS 0.2%CVE-2026-44584MEDIUMPaymenter doesn't reset email verification status after email changeEPSS 0.2%