EUVD-2022-37773

Malicious code in bioql PyPI...

EUVD-2022-39092

Malicious code in bioql PyPI...

MAL-2025-5756 Malicious code in yoomoney-github-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14e08c44a9dd94a4287271b74da8909f742693755d7bc3b79fd186cf5163ea9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoomoney-github-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14e08c44a9dd94a4287271b74da8909f742693755d7bc3b79fd186cf5163ea9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-36379

Cross-Site Request Forgery CSRF leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin = 2.3.0 at WordPress...

CVE-2022-36379

Cross-Site Request Forgery CSRF leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin = 2.3.0 at WordPress...

CVE-2022-34868

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin = 2.3.0 at WordPress...

CVE-2022-34868

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin = 2.3.0 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF leading to plugin settings update in YooMoney ?Kassa ??? WooCommerce plugin = 2.3.0 at WordPress...

Code injection

Authenticated Arbitrary Settings Update vulnerability in YooMoney ?Kassa ??? WooCommerce plugin = 2.3.0 at WordPress...

CVE-2022-36379

CVE-2022-36379 concerns the WordPress plugin YooMoney ЮKassa для WooCommerce, vulnerable to Cross-Site Request Forgery (CSRF) that can lead to unauthorized plugin settings updates. Affected versions: 2.3.0 and earlier. Root cause: CSRF flaw allowing unauthorized changes to plugin configuration. I...

CVE-2022-36379 WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update

Cross-Site Request Forgery CSRF leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin = 2.3.0 at WordPress...

CVE-2022-34868

CVE-2022-34868 affects the YooMoney ЮKassa for WooCommerce WordPress plugin (versions

PT-2022-23339 · Yoomoney · Yoomoney Юkassa Для Woocommerce

Name of the Vulnerable Software and Affected Versions: YooMoney ЮKassa для WooCommerce plugin version 2.3.0 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF that can lead to the update of plugin settings. This can potentially affect a significant number of devices...