High · 8.8 CVE-2022-34868 EUVD-2022-37773GHSA-4j46-x23q-8896

WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability

Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

Vendor	Product	Affected	Fixed
YooMoney	ЮKassa для WooCommerce (WordPress plugin)	<= 2.3.0 – ≤ 2.3.0	—