Yan&Co
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WooCommerce CVR Payment Gateway | 1 | – | Sep 14, 2023 |
| WooCommerce EAN Payment Gateway | 1 | – | Oct 20, 2023 |
Exploited and recent CVEs
- CVE-2023-4947 WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update 0.4%
- CVE-2023-4948 WooCommerce CVR Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update 0.4%