Advisories · Technology

YooMoney ЮKassa для WooCommerce (WordPress plugin).

Every CVE that names YooMoney ЮKassa для WooCommerce (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36379 CVE record

CVSS 8.8 High

WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update
- YooMoney ЮKassa для WooCommerce (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 23 Aug 2022
CVE-2022-34868 CVE record

CVSS 8.8 High

WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability
- YooMoney ЮKassa для WooCommerce (WordPress plugin)
- CWE-264
Not analysed yet 23 Aug 2022