Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ndijkstra Clear all filters
TI-2024-01307 CVE-2024-1400 · GHSA-mwpw-qjpv-xv3x

Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication

Priority LOW 20

The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00341 Published 2024-03-11 No fix listed CWE-862
TI-2024-01528 CVE-2024-1645 · GHSA-xxmf-2mw8-gvh6

Mollie Forms <= 2.6.3 - Missing Authorization

Priority MEDIUM 53

The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00455 Published 2024-03-11 No fix listed CWE-862
TI-2021-03234 CVE-2021-4377 · GHSA-3h65-qjq4-488h

Doneren met Mollie <= 2.8.4 - Information Disclosure

Priority LOW 31

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmm_export_donations() function which is called via the admin_post_dmm_export hook due…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01032 Published 2023-06-07 No fix listed CWE-200