WordPress plugin
Yaad Sarig Payment Gateway For WC security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Yaad Sarig Payment Gateway For WC vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Authenticated (Subscriber+) Insecure Direct Object Reference ≤2.2.12Update to 2.2.13 | CVE-2026-104651 | |
| Medium5.3 | Missing Authorization ≤2.2.12Update to 2.2.13 | CVE-2025-66131 | |
| Medium5.4 | Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion ≤2.2.4Update to 2.2.5 | CVE-2024-10665 |
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
≤2.2.12Update to 2.2.13
- Medium5.3Missing Authorization
≤2.2.12Update to 2.2.13
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion
≤2.2.4Update to 2.2.5
Yaad Sarig Payment Gateway For WC: common questions
Does Yaad Sarig Payment Gateway For WC have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Yaad Sarig Payment Gateway For WC: 3 medium. None are known to affect version null.
How do I check which version of Yaad Sarig Payment Gateway For WC I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Yaad Sarig Payment Gateway For WC vulnerability?
CVE-2026-104651, published Oct 5, 2026: Yaad Sarig Payment Gateway For WC <= 2.2.12 - Authenticated (Subscriber+) Insecure Direct Object Reference. Severity: Medium (CVSS 4.3).
Is any Yaad Sarig Payment Gateway For WC vulnerability listed in CISA KEV?
No. None of the known Yaad Sarig Payment Gateway For WC vulnerabilities is currently listed in the CISA KEV catalog.