Vendors / yoomoney Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now yoomoney records in CISA KEV No yoomoney vulnerabilities are listed in CISA KEV.
Priority LOW 30
Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00256 · Published 2026-10-22 · No fix listed CWE-862
Priority LOW 29
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2026-07-27 · No fix listed CWE-201
Priority LOW 20
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00254 · Published 2026-07-23 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High0 Medium3 Low0 No CVSS0