Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-07
Yaad Sarig Payment Gateway For WC - Security Vulnerability (CVE-2026-104651)
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to other customers.
PLUGIN
Yaad Sarig Payment Gateway For WC
CVE-2026-104651
Risk Score
Threat Entry
Updated 2026-06-17
Yaad Sarig Payment Gateway For Wc - Broken Access Control (CVE-2025-66131)
Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through
PLUGIN
Yaad Sarig Payment Gateway For Wc
CVE-2025-66131
Risk Score
Threat Entry
Updated 2026-06-17
Yaad Sarig Payment Gateway For Wc - Broken Access Control (CVE-2024-10665)
The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and delete logs.
PLUGIN
Yaad Sarig Payment Gateway For Wc
CVE-2024-10665
Risk Score