Extension WordPress
Vulnérabilités Paytium: Mollie payment forms & donations
Cette page rassemble les failles publiées pour Paytium: Mollie payment forms & donations, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Paytium: Mollie payment forms & donations
14 fiches
Paytium: Mollie payment forms & donations <= 5.0.2 – Unauthenticated Privilege Escalation
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to elevate their privileges.
*-5.0.2
5.0.3
23/06/2026
Paytium <= 4.4.11 – Unauthenticated Full Path Disclosure
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.4.11. This makes it possible for unauthenticated attackers to retrieve the full path of the…
*-4.4.11
4.4.12
24/01/2025
Paytium <= 4.4.10 – Missing Authorization
The Paytium plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the paytium_emails_attachments() function in versions up to, and including, 4.4.10. This makes it possible for authenticated attackers, with subscriber-level…
*-4.4.10
4.4.11
01/11/2024
Paytium: Mollie payment forms & donations <= 4.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping on user…
*-4.4.2
4.4.3
12/02/2024
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'create_mollie_profile'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including, 4.3.7. This makes it possible for…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'check_mollie_account_details'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and including, 4.3.7. This makes it possible…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'paytium_notice_dismiss'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'create_mollie_account'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and including, 4.3.7. This makes it possible…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'check_for_verified_profiles'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and including, 4.3.7. This makes it possible…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'paytium_sw_save_api_keys'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including, 4.3.7. This makes it possible…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'update_profile_preference'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and including, 4.3.7. This makes it possible for…
*-4.3.7
4.4
06/03/2023
Paytium: Mollie payment forms & donations <= 4.3.7 – Missing Authorization in 'pt_cancel_subscription'
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and including, 4.3.7. This makes it possible for…
*-4.3.7
4.4
06/03/2023
Paytium <= 4.3.6 – Authenticated (Admin+) Stored Cross-Site Scripting
The Paytium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paytium_live_api_key' option and 'newsletter_group' attribute in versions up to, and including, 4.3.6 due to insufficient input sanitization and output escaping. This makes it possible for…
*-4.3.6
4.3.7
30/11/2022
Paytium <= 3.1.1 – Stored Cross-Site Scripting
The Paytium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'get_field_data_html()' function in versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to…
*-3.1.1
3.1.2
12/05/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.