Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-04
Mollie Payments for WooCommerce - Security Vulnerability (CVE-2026-101166)
The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products.
PLUGIN
Mollie Payments for WooCommerce
CVE-2026-101166
Risk Score
Threat Entry
Updated 2026-11-04
Mollie Payments for WooCommerce - Security Vulnerability (CVE-2026-101165)
The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's payment state or the requested payment gateway before removing a configured payment-surcharge fee, allowing unauthenticated users to reduce an order's total before completing payment.
PLUGIN
Mollie Payments for WooCommerce
CVE-2026-101165
Risk Score
Threat Entry
Updated 2026-06-17
Mollie Payments For Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-68501)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows Reflected XSS.This issue affects Mollie Payments for WooCommerce: from n/a through
PLUGIN
Mollie Payments For Woocommerce
CVE-2025-68501
Risk Score
Threat Entry
Updated 2026-06-17
Mollie Payments For Woocommerce - Broken Access Control (CVE-2025-39362)
Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce.This issue affects Mollie Payments for WooCommerce: from n/a through
PLUGIN
Mollie Payments For Woocommerce
CVE-2025-39362
Risk Score
Threat Entry
Updated 2026-06-17
Mollie Payments For Woocommerce - Information Disclosure (CVE-2024-6448)
The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.
PLUGIN
Mollie Payments For Woocommerce
CVE-2024-6448
Risk Score
Threat Entry
Updated 2026-06-17
Mollie Payments For Woocommerce - Arbitrary File Upload (CVE-2023-6090)
Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.
PLUGIN
Mollie Payments For Woocommerce
CVE-2023-6090
Risk Score