Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

yoomoney vulnerabilities

5 published CVEs name yoomoney among the affected products.

All 5 in the listAtom feed of new CVEs
Published CVEs
5
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 2Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20222
  2. 20263

Newest CVEs

  • CVE-2026-114699

    WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability

    yoomoney · ЮKassa для WooCommerce

    Medium5.3
  • CVE-2026-65434

    WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

    yoomoney · ЮKassa для WooCommerce

    Medium6.5
  • CVE-2026-65457

    WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability

    yoomoney · ЮKassa для WooCommerce

    Medium4.3
  • CVE-2022-36379

    WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update

    YooMoney · ЮKassa для WooCommerce (WordPress plugin)

    High8.8
  • CVE-2022-34868

    WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability

    YooMoney · ЮKassa для WooCommerce (WordPress plugin)

    High8.8

Products with the most CVEs

  1. ЮKassa для WooCommerce3
  2. ЮKassa для WooCommerce (WordPress plugin)2

Most common weaknesses

  1. CWE-862 Missing authorization2
  2. CWE-201 1
  3. CWE-264 Permissions, privileges and access controls1
  4. CWE-352 Cross-site request forgery (CSRF)1