Priority MEDIUM 55
The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a…
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00493 · Published 2022-12-26 · Fixed in 4.3.7
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00449 · Published 2026-10-24 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00483 · Published 2026-06-26 · No fix listed CWE-266
Priority MEDIUM 49
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-09-24 · No fix listed CWE-269
Priority LOW 35
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and includi…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00359 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in paytiumsupport Paytium paytium allows Retrieve Embedded Sensitive Data.This issue affects Paytium: from n/a through <= 4.4.11.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00525 · Published 2025-01-24 · No fix listed CWE-209
Priority LOW 31
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including,…
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00336 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David de Boer Paytium: Mollie payment forms & donations allows Stored XSS.This issue affects Paytium: Mollie payment f…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00419 · Published 2024-03-13 · No fix listed CWE-79
Priority LOW 24
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including,…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.0028 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 24
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and includ…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.0028 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 24
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and i…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00317 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through <= 4.4.10.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00324 · Published 2024-12-31 · No fix listed CWE-862
Priority LOW 20
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and includ…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00249 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 20
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and incl…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0028 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 20
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and includi…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00249 · Published 2024-10-16 · No fix listed CWE-862