PT-2026-88898

CVE-2026-16272

·

Published

2026-09-09

·

Updated

2026-10-01

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2
Description The PayTR Virtual Pos iFrame API WHMCS Module contains a flaw involving the use of a less trusted source, which allows for the exploitation of trusted identifiers.
Recommendations Update PayTR Virtual Pos iFrame API WHMCS Module to version 9.0.3.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-348: Use of Less Trusted Source
Related identifiers
CVE-2026-16272
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com