CVE-2021-4377

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmmexportdonations function which is called via the adminpostdmmexport hook due to missing capability checks. This can allow authenticated attackers to extract a CS...

CVE-2021-4377

The connected documents confirm CVE-2021-4377 affects the Doneren met Mollie WordPress plugin up to version 2.8.5. The root cause is missing capability checks in the dmm_export_donations() function, called via the admin_post_dmm_export hook, leading to potential Sensitive Data Exposure. The impac...

CVE-2021-4377 Doneren met Mollie <= 2.8.4 - Information Disclosure

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmmexportdonations function which is called via the adminpostdmmexport hook due to missing capability checks. This can allow authenticated attackers to extract a CS...