High · 8.8 CVE-2022-36379 EUVD-2022-39092GHSA-42qc-mrm5-rf8f

WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update

Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

Vendor	Product	Affected	Fixed
YooMoney	ЮKassa для WooCommerce (WordPress plugin)	<= 2.3.0 – ≤ 2.3.0	—