CVE-2022-34868

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2022-08-23

Last modified

2026-04-28

Weaknesses

CWE-264

Affected products

• Yukassa For Woocommerce (Yookassa)
• Kassa Woocommerce Wordpress Plugin (Yoomoney)

References

• https://patchstack.com/database/vulnerability/yookassa/wordpress-yukassa-dlya-woocommerce-plugin-2-3-0-authenticated-ar…
• https://wordpress.org/plugins/yookassa/#developers