Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ndijkstra Component: Mollie Forms Clear all filters
TI-2024-01307 CVE-2024-1400 · GHSA-mwpw-qjpv-xv3x

Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication

Priority LOW 20

The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00341 Published 2024-03-11 No fix listed CWE-862
TI-2024-01528 CVE-2024-1645 · GHSA-xxmf-2mw8-gvh6

Mollie Forms <= 2.6.3 - Missing Authorization

Priority MEDIUM 53

The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00455 Published 2024-03-11 No fix listed CWE-862