yoomoney vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-114699ЮKassa для WooCommerce (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-10-22CVE Database V5CVE-2026-114699 CVE-2026-114699 is a missing authorization vulnerability in the yoomoney ЮKassa plugin for WooCommerce. It affects versions from 0 up to and including 2.17.3. The flaw allows exploitation due to incorrectly configured access control security levels, potentially enabling unauthorized access to certain functionality. The vulnerability has a medium severity rating with a CVSS score of 5.3. No public exploits or known active exploitation have been reported. No patch or remediation information is currently provided. EPSS 0.3%Vulnerability yoomoney	CVE Database V5	2026-10-22
Medium	6.5	EPSS 0.4%	CVE-2026-65434ЮKassa для WooCommerce (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2026-07-27CVE Database V5CVE-2026-65434 Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. EPSS 0.4%Vulnerability yoomoney CWE-201	CVE Database V5	2026-07-27
Medium	4.3	EPSS 0.3%	CVE-2026-65457ЮKassa для WooCommerce (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65457 Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. EPSS 0.3%Vulnerability yoomoney CWE-862	CVE Database V5	2026-07-23

Page 1 of 1