Vulnerabilities / ЮKassa для WooCommerce
ЮKassa для WooCommerce vulnerabilities
Advisories WPSec published for ЮKassa для WooCommerce. Other sources may list more. Its attack surface: ЮKassa для WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-04 | WPSEC-2026-2510 | ЮKassa для WooCommerce <= 2.17.3 - Unauthenticated Insecure Direct Object Reference to Payment Status Disclosure via 'order-id' Parameter | Medium 5.3 | 2.17.4 |
| 2026-11-04 | WPSEC-2026-2509 | ЮKassa для WooCommerce <= 2.17.3 - Unauthenticated Saved Payment Method Injection via Forged Payment Notification | Medium 5.3 | 2.17.4 |
License: CC BY 4.0