Read the docs

yaadsarig

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

yaadsarig records in CISA KEV

No yaadsarig vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-40656 CVE-2025-66131 · GHSA-wqpx-wp8j-gw7r

WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability

Priority LOW 32

Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig P…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00267 Published 2025-12-16 No fix listed CWE-862
TI-2024-09883 CVE-2024-10665 · GHSA-hjq2-g54r-cfw9

Yaad Sarig Payment Gateway For WC <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion

Priority LOW 24

The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback(…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00283 Published 2024-11-20 No fix listed CWE-862
Open these records in search →