Vulnerabilities

TI-2026-79239 CVE-2026-114699 · GHSA-rhv8-2j2w-63wq

Missing authorization in ЮKassa для WooCommerce WordPress plugin

LOW 30

Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00256 Published 2026-10-22 No fix listed CWE-862

TI-2026-46606 CVE-2026-65434 · GHSA-6859-9wvg-j577

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

LOW 29

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00371 Published 2026-07-27 No fix listed CWE-201

TI-2026-46628 CVE-2026-65457 · GHSA-qrpg-jwq8-56g9

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability

LOW 20

Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-07-23 No fix listed CWE-862

Vulnerabilities

Filters

Missing authorization in ЮKassa для WooCommerce WordPress plugin

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability