CVE-2022-34868: Yookassa Yukassa For Woocommerce

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

Affected products

• Yookassa Yukassa For Woocommerce: before 2.3.1 (fixed in 2.3.1)

Published 2022-08-23. Last modified 2026-06-17.