GCVE - cpe:2.3:a:paytiumsupport:paytium:_mollie_payment_forms_&

Approved changes feed: RSS · Atom

cpe:2.3:a:paytiumsupport:paytium:_mollie_payment_forms_&_donations:*:*:*:*:*:*:*:*

part: a version: _mollie_payment_forms_&_donations update: *

Vendor	Paytiumsupport (`d137bfac-d3cb-5a2f-9882-87748d5227ec`)
Product	Paytium (`16b67062-2e49-590d-9e6a-bd5dc419f593`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-7294`	vulnerable	2026-06-08 06:21:57.496818	Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile' HIGH (7.1) The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to create a mollie payment profile. Published: 2024-10-16T06:43:46.535Z Updated: 2026-04-08T17:34:35.501Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/fbbd3209-7ed6-4409-a24e-9f6225cf10f5?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2853869%40paytium%2Ftrunk&old=2824314%40paytium%2Ftrunk&sfp_email=&sfph_mail=#file0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7293`	vulnerable	2026-06-08 06:21:57.496361	Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details' MEDIUM (4.3) The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to verify the existence of a mollie account. Published: 2024-10-16T06:43:46.043Z Updated: 2026-04-08T17:32:14.046Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/f065648a-436a-459c-8ab1-c948c78b43c9?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2853869%40paytium%2Ftrunk&old=2824314%40paytium%2Ftrunk&sfp_email=&sfph_mail=#file0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7292`	vulnerable	2026-06-08 06:21:57.496009	Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss' MEDIUM (4.3) The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to dismiss admin notices. Published: 2024-10-16T06:43:45.569Z Updated: 2026-04-08T17:31:12.791Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/eb6642c0-9011-419b-bef6-5aa594993c01?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2853869%40paytium%2Ftrunk&old=2824314%40paytium%2Ftrunk&sfp_email=&sfph_mail=#file0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7291`	vulnerable	2026-06-08 06:21:57.495574	Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account' HIGH (7.1) The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to set up a mollie account. Published: 2024-10-16T06:43:43.626Z Updated: 2026-04-08T17:25:46.023Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/d4491b89-2120-4edb-a396-e45ba09b3b99?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2853869%40paytium%2Ftrunk&old=2824314%40paytium%2Ftrunk&sfp_email=&sfph_mail=#file0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7290`	vulnerable	2026-06-08 06:21:57.495098	Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles' MEDIUM (4.3) The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to check profile statuses. Published: 2024-10-16T06:43:41.271Z Updated: 2026-04-08T17:15:33.044Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/af55c470-b94d-49ee-8b72-44652dcccd73?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2853869%40paytium%2Ftrunk&old=2824314%40paytium%2Ftrunk&sfp_email=&sfph_mail=#file0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7289`	vulnerable	2026-06-08 06:21:57.494586	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7288`	vulnerable	2026-06-08 06:21:57.494078	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7287`	vulnerable	2026-06-08 06:21:57.492634	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Paytium

Notes

PURL mappings

Vulnerability references

Contribute