Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: yaadsarig Clear all filters
TI-2025-40656 CVE-2025-66131 · GHSA-wqpx-wp8j-gw7r

WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability

Priority LOW 32

Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig P…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00267 Published 2025-12-16 No fix listed CWE-862
TI-2024-09883 CVE-2024-10665 · GHSA-hjq2-g54r-cfw9

Yaad Sarig Payment Gateway For WC <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion

Priority LOW 24

The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback(…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00283 Published 2024-11-20 No fix listed CWE-862