Approved changes feed: RSS · Atom

cpe:2.3:a:mollie:mollie_payments_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorMollie (b5bc0bb1-2b71-5a93-8923-2e268871289c)
ProductMollie Payments For Woocommerce (1a9415d5-2ce5-54ee-a512-1f71b8386f0f)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mollie/woocommerce purl2cpe 2026-06-01 10:16:13.685944

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6448 vulnerable 2026-06-08 06:58:19.486096 Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
MEDIUM (5.3)
The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.
Published: 2024-08-28T03:27:28.062Z
Updated: 2026-04-08T16:35:07.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6090 vulnerable 2026-06-08 06:19:45.540967 WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.
Published: 2024-02-29T05:23:56.567Z
Updated: 2026-04-28T16:09:07.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.