Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: paytiumsupport Component: Paytium Clear all filters
TI-2023-06664 CVE-2023-7294 · GHSA-w766-4gmc-93g7

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

Priority LOW 31

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including,…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00336 Published 2024-10-16 No fix listed CWE-862
TI-2023-06663 CVE-2023-7293 · GHSA-v38c-2f82-67rg

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'

Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and includ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00249 Published 2024-10-16 No fix listed CWE-862
TI-2023-06662 CVE-2023-7292 · GHSA-2w5c-c482-7r7g

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss'

Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and incl…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
TI-2023-06661 CVE-2023-7291 · GHSA-rxhh-67gx-mr8w

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'

Priority LOW 35

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and includi…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00359 Published 2024-10-16 No fix listed CWE-862
TI-2023-06660 CVE-2023-7290 · GHSA-q2x8-2qjv-xr8h

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles'

Priority LOW 20

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00249 Published 2024-10-16 No fix listed CWE-862
TI-2023-06659 CVE-2023-7289 · GHSA-g6ww-gh3r-4m77

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_sw_save_api_keys'

Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including,…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
TI-2023-06658 CVE-2023-7288 · GHSA-6x85-ff3p-w5x2

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'

Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and includ…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2024-10-16 No fix listed CWE-862
TI-2023-06657 CVE-2023-7287 · GHSA-7f75-2r9g-cgh9

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'

Priority LOW 24

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and i…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00317 Published 2024-10-16 No fix listed CWE-862
TI-2024-16556 CVE-2024-25099 · GHSA-f42c-xh36-34pq

WordPress Paytium: Mollie payment forms & donations Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David de Boer Paytium: Mollie payment forms & donations allows Stored XSS.This issue affects Paytium: Mollie payment f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00419 Published 2024-03-13 No fix listed CWE-79
TI-2022-03708 CVE-2022-4042 · GHSA-xfp4-93xh-85w6

Paytium < 4.3.7 - Admin+ Stored XSS

Priority MEDIUM 55

The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-26 Fixed in 4.3.7