YoOhw Studio vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.1%	CVE-2026-96838Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification (WordPress plugin) · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.1%2026-09-30CVE Database V5CVE-2026-96838 Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions. EPSS 0.1%Vulnerability YoOhw Studio CWE-352	CVE Database V5	2026-09-30
Medium	4.3	EPSS 0.2%	CVE-2025-49352Order Cancellation & Returns for WooCommerce (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-49352 Authorization Bypass Through User-Controlled Key vulnerability in YoOhw Studio Order Cancellation & Returns for WooCommerce wc-order-cancellation-return allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Cancellation & Returns for WooCommerce: from n/a through <= 1.1.11. EPSS 0.2%Vulnerability YoOhw Studio	CVE Database V5	2025-12-31

Page 1 of 1