Yookassa

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Yookassa records in CISA KEV

No Yookassa vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-15665 CVE-2022-34868 · GHSA-4j46-x23q-8896

MEDIUM 42

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01105 Published 2022-08-23 No fix listed CWE-264

TI-2022-16718 CVE-2022-36379 · GHSA-42qc-mrm5-rf8f

MEDIUM 41

Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00506 Published 2022-08-23 No fix listed CWE-352