Yampi Checkout

Yampi Checkout has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Yampi Checkout has a vendor fix available, so running the current release closes it.

Yampi Checkout is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Yampi Checkout vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Yampi Checkout < = 1.0.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2022-06-13 00:00	Yampi Checkout < = 1.0.3 - Reflected Cross-Site Scripting Yampi Checkout <= 1.0.3	`N/A`	6.1 Medium	Anonymous	Yes

Showing 1–1 of 1 reports

Latestv1.0.5

Yampi Checkout

Author

lucascolette

2.5(4)

50/100

Last Updated

2024-06-10 (2y ago)

Active Installs

800+

Downloads

24,007

Requires WP

3.8.0+

Requires PHP

Tested up to

WP 6.5.10

Created

2020-03-27 (7y ago)

Recurso nativo de recuperação de carrinhos abandonados por e-mail e SMS; Upsell OneClick; Integrado com mais de 10 gateways/adquirentes de pagamento; Recuperação de boletos; Rastreamento de pedidos; Confira todos os recursos em www.yampi.com.br/checkout

View on WordPress.org