Vulnerabilities in Paymenter
7 resultsCVE-2025-58048CRITICALPaymenter Vulnerable to Remote Code Execution via Public File UploadsEPSS 0.4%CVE-2026-44583MEDIUMPaymenter: Blind Unauthenticated SSRF on the Paypal gateway moduleEPSS 0.4%CVE-2026-47198HIGHPaymenter: URL parameter injection bypasses paid plan limits at checkoutEPSS 0.4%CVE-2026-71537MEDIUMPaymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)EPSS 0.3%CVE-2026-44585MEDIUMPaymenter: Broken object level authorization via service reference manipulation on ticket creationEPSS 0.3%CVE-2026-55219MEDIUMPaymenter: Race condition in payWithCredit() enables credit double-spendEPSS 0.2%CVE-2026-44584MEDIUMPaymenter doesn't reset email verification status after email changeEPSS 0.2%