plugin

Splitit Installment Payments Vulnerabilities

1 known security issue reported for the Splitit Installment Payments WordPress plugin. Most recent disclosed May 20, 2025.

1 medium

Running Splitit Installment Payments on your site? Check whether your installed version is affected.

Scan your site free

Splitit <= 4.2.8 - Missing Authorization to Multiple Administrative Actions

medium

The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and...

CVSS:: 5.4
Affected:: up to 4.2.8
Fixed in:: 4.2.9
Disclosed:: May 20, 2025

CVE-2025-4105 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database