VYPR

Splitit

by Splitit

CVEs (1)

  • CVE-2025-4105MedMay 21, 2025
    risk 0.28cvss 5.4epss 0.00

    The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and including, 4.2.8. This makes it possible for authenticated…