Read the docs

Yanco

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Yanco records in CISA KEV

No Yanco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Cvr Payment Gateway 1 record LOW Woocommerce Ean Payment Gateway 1 record LOW

Records

2 records

TI-2023-04557 CVE-2023-4948 · GHSA-wqm5-mw93-49xf

WooCommerce CVR Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update

Priority LOW 20

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_order_cvr_data AJAX action in versions up to 6.1.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00386 Published 2023-09-14 Fixed in 6.1.0 CWE-862
TI-2023-04556 CVE-2023-4947 · GHSA-jhg8-jx4g-7x8h

WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update

Priority LOW 20

The WooCommerce EAN Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_order_ean_data AJAX action in versions up to 6.1.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00435 Published 2023-10-20 Fixed in 6.1.0 CWE-862
Open these records in search →