YooMoney

Products

ProductCVEsExploitedLatest
ЮKassa для WooCommerce3–Oct 22, 2026
ЮKassa для WooCommerce (WordPress plugin)2–Aug 23, 2022

Exploited and recent CVEs

  • CVE-2026-114699 Medium 5.3 WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability 0.3%
  • CVE-2026-65434 Medium 6.5 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2026-65457 Medium 4.3 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability 0.3%
  • CVE-2022-36379 High 8.8 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update 0.5%
  • CVE-2022-34868 High 8.8 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability 1.1%