CVE-2023-7291

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

CVE-2023-7292

The CVE-2023-7292 entry concerns the WordPress Paytium: Mollie payment forms & donations plugin. Affected component: paytium_notice_dismiss function; root cause: missing capability check, allowing unauthorized dismissal of admin notices. Impact: authenticated users with subscriber-level access ca...