Approved changes feed: RSS · Atom

cpe:2.3:a:mollie:mollie_payments_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMollie (b5bc0bb1-2b71-5a93-8923-2e268871289c)
ProductMollie Payments For Woocommerce (1a9415d5-2ce5-54ee-a512-1f71b8386f0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mollie/woocommerce purl2cpe 2026-06-01 10:16:13.669283

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-68501 vulnerable 2026-06-08 07:41:21.314588 WordPress Mollie Payments for WooCommerce plugin <= 8.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows Reflected XSS.This issue affects Mollie Payments for WooCommerce: from n/a through <= 8.1.1.
Published: 2026-02-20T15:46:38.572Z
Updated: 2026-04-28T19:59:44.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39362 vulnerable 2026-06-08 07:23:06.452818 WordPress Mollie Payments for WooCommerce plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce.This issue affects Mollie Payments for WooCommerce: from n/a through <= 8.0.2.
Published: 2025-07-02T10:59:06.466Z
Updated: 2026-04-28T16:12:29.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6090 vulnerable 2026-06-08 06:19:45.542249 WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.
Published: 2024-02-29T05:23:56.567Z
Updated: 2026-04-28T16:09:07.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.