Yukassa For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36379 Aug 23, 16:15 HIGH This Week

Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Yukassa For Woocommerce

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2022-34868 Aug 23, 16:15 MEDIUM PATCH This Month

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress Privilege Escalation Wordpress Plugin Yukassa For Woocommerce

NVD

CVSS 3.1

6.5

EPSS

0.9%

CVE-2022-36379

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Wordpress Plugin +1

NVD

CVE-2022-34868

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

WordPress Privilege Escalation Wordpress Plugin +1

NVD