Approved changes feed: RSS · Atom

cpe:2.3:a:paytr_payment_and_electronic_money_institution_inc.:paytr_virtual_pos_iframe_api_(v9x)_whmcs_module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPaytr Payment And Electronic Money Institution Inc. (b59d42a9-9258-5710-9521-b95f79c15a66)
ProductPaytr Virtual Pos Iframe Api (V9X) Whmcs Module (78112c87-c381-58dd-9c47-b3d338e6eaa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16037 vulnerable 2026-09-16 04:32:57.188850 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
HIGH (7.5)
Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.
Published: 2026-09-08T15:12:44.262Z
Updated: 2026-10-01T12:41:42.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16272 vulnerable 2026-09-16 04:32:56.461341 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
CRITICAL (9.1)
Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.
Published: 2026-09-09T08:17:50.299Z
Updated: 2026-10-01T12:42:49.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16025 vulnerable 2026-09-16 04:32:56.430236 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
HIGH (7.5)
Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.
Published: 2026-09-08T15:06:17.238Z
Updated: 2026-10-01T12:43:49.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.