← All advisories

High severity8.8NVD Advisory· Published Aug 23, 2022· Updated Jun 17, 2026

CVE-2022-36379

CVE-2022-36379

Description

Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/YooMoney ЮKassa для WooCommercellm-fuzzy
Range: <=2.3.0
YooMoney/ЮKassa для WooCommerce (WordPress plugin)v5
Range: <= 2.3.0

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/yookassa/wordpress-yukassa-dlya-woocommerce-plugin-2-3-0-cross-site-request-forgery-csrf-leading-to-plugin-settings-updatenvdThird Party Advisory
wordpress.org/plugins/yookassa/nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.