Vulnerabilities

TI-2024-05985 CVE-2024-6448 · GHSA-87cg-rf9j-6g9f

Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

LOW 30

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00452 Published 2024-08-28 No fix listed CWE-200

TI-2023-05601 CVE-2023-6090 · GHSA-6699-4qcw-gf5x

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00603 Published 2024-02-29 No fix listed CWE-434

Vulnerabilities

Filters

Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload