Read the docs

paytiumsupport

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

paytiumsupport records in CISA KEV

No paytiumsupport vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records

TI-2022-03708 CVE-2022-4042 · GHSA-xfp4-93xh-85w6

Paytium < 4.3.7 - Admin+ Stored XSS

Priority MEDIUM 55

The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-26 Fixed in 4.3.7
Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00449 Published 2026-10-24 No fix listed CWE-502
Priority LOW 35

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and includi…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00359 Published 2024-10-16 No fix listed CWE-862
Priority LOW 31

Generation of Error Message Containing Sensitive Information vulnerability in paytiumsupport Paytium paytium allows Retrieve Embedded Sensitive Data.This issue affects Paytium: from n/a through <= 4.4.11.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00525 Published 2025-01-24 No fix listed CWE-209
Priority LOW 31

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including,…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00336 Published 2024-10-16 No fix listed CWE-862
Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David de Boer Paytium: Mollie payment forms & donations allows Stored XSS.This issue affects Paytium: Mollie payment f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00419 Published 2024-03-13 No fix listed CWE-79
Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including,…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and includ…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and i…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00317 Published 2024-10-16 No fix listed CWE-862
Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and includ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00249 Published 2024-10-16 No fix listed CWE-862
Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and incl…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00249 Published 2024-10-16 No fix listed CWE-862
Open these records in search →