YooMoney
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ЮKassa для WooCommerce | 3 | – | Oct 22, 2026 |
| ЮKassa для WooCommerce (WordPress plugin) | 2 | – | Aug 23, 2022 |
Exploited and recent CVEs
- CVE-2026-114699 WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability 0.3%
- CVE-2026-65434 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2026-65457 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability 0.3%
- CVE-2022-36379 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update 0.5%
- CVE-2022-34868 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability 1.1%