CVE-2022-36379 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update

[
  {
    "product": "ЮKassa для WooCommerce (WordPress plugin)",
    "vendor": "YooMoney",
    "versions": [
      {
        "lessThanOrEqual": "2.3.0",
        "status": "affected",
        "version": "<= 2.3.0",
        "versionType": "custom"
      }
    ]
  }
]