Vendors / YoOhw Studio Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now YoOhw Studio records in CISA KEV No YoOhw Studio vulnerabilities are listed in CISA KEV.
Priority LOW 37
Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00139 · Published 2026-09-30 · No fix listed CWE-352
Priority LOW 20
Authorization Bypass Through User-Controlled Key vulnerability in YoOhw Studio Order Cancellation & Returns for WooCommerce wc-order-cancellation-return allows Exploiting Incorrectly Configured Access Control Security Le…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00245 · Published 2025-12-31 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0