CVE-2024-51667 WordPress paytium plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through = 4.4.10...

CVE-2024-51667

CVE-2024-51667 : Missing Authorization vulnerability in WordPress Paytium plugin (David de Boer) affecting Paytium versions

WordPress plugin Paytium 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2023-7292

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytiumnoticedismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

CVE-2023-7289

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytiumswsaveapikeys function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level...

CVE-2023-7291

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

CVE-2023-7291

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

CVE-2023-7288

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

CVE-2023-7290

Summary: The Paytium: Mollie payment forms & donations plugin for WordPress (versions up to 4.3.7) has a missing capability check in the check_for_verified_profiles function, allowing authenticated users with subscriber-level access to unauthorizedly view profile statuses. Impact: unauthorized da...

PT-2024-15271 · WordPress · The Paytium: Mollie Payment Forms & Donations

Name of the Vulnerable Software and Affected Versions: The Paytium: Mollie payment forms & donations plugin for WordPress versions up to, and including, 4.3.7 Description: The issue is related to unauthorized access of data due to a missing capability check on the check for verified profiles...

VulnCheck KEV: CVE-2023-7292

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytiumnoticedismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

WordPress Paytium Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Paytium Type Plugin Vulnerable versions = 4.4.2 Fixed in 4.4.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25099 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5a3bcaaed120 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

WordPress Paytium Plugin <= 4.3.7 is vulnerable to Broken Access Control

Software Paytium Type Plugin Vulnerable versions = 4.3.7 Fixed in 4.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 6.3 Developer Claim ownership PSID 13b7e0f1ab0b Credits Unknown Required privilege Subscriber Published ...

CVE-2022-4042 Paytium < 4.3.7 - Admin+ Stored XSS

The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...