Yaad Sarig Payment Gateway For Wc Vulnerabilities

[en] Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through <= 2.2.10.

Affected:

up to 2.2.10

Fix:

No patched version reported

Disclosed:

Dec 16, 2025

CVE-2025-66131 on NVD →

The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.2.10

Fix:

No patched version reported

Disclosed:

Dec 15, 2025

CVE-2025-66131 on NVD →

[en] The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions in all versions up to, and including, 2.2.4. This makes it possible for authenticat...

Affected:

up to 2.2.5

Fixed in:

2.2.5

Disclosed:

Nov 20, 2024

CVE-2024-10665 on NVD →

The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions in all versions up to, and including, 2.2.4. This makes it possible for authenticated at...

CVSS:

5.4

Affected:

up to 2.2.4

Fixed in:

2.2.5

Disclosed:

Nov 19, 2024

CVE-2024-10665 on NVD →