yapacdev

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

yapacdev records in CISA KEV

No yapacdev vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-08442 CVE-2026-9612 · GHSA-xwgw-9h6v-6mv7

WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs

LOW 31

The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the yapacdev_generate_order_pdf.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00542 Published 2026-06-24 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0