Threat Entry Updated 2024-10-17

CVE-2023-7294 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to create a mollie payment profile.

PLUGIN Paytium

CVE-2023-7294

HIGH CVSS 7.1 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7291 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to set up a mollie account.

PLUGIN Paytium

CVE-2023-7291

HIGH CVSS 7.1 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7289 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to change plugin API keys.

PLUGIN Paytium

CVE-2023-7289

MEDIUM CVSS 5.4 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7293 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to verify the existence of a mollie account.

PLUGIN Paytium

CVE-2023-7293

MEDIUM CVSS 4.3 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7292 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to dismiss admin notices.

PLUGIN Paytium

CVE-2023-7292

MEDIUM CVSS 4.3 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7290 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to check profile statuses.

PLUGIN Paytium

CVE-2023-7290

MEDIUM CVSS 4.3 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7288 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to change plugin settings.

PLUGIN Paytium

CVE-2023-7288

MEDIUM CVSS 5.4 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-17

CVE-2023-7287 - Paytium Plugin

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to cancel a subscription to the plugin.

PLUGIN Paytium

CVE-2023-7287

MEDIUM CVSS 5.4 2024-10-16

Risk Score

Open Full Technical Breakdown