Yookassa Yukassa For Woocommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Yookassa Yukassa For Woocommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-34868 — CVSS 8.8 (high): Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.
• CVE-2022-36379 — CVSS 8.8 (high): Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.