CVE-2024-1645mediumCWE-862

CVE-2024-1645: medium-severity vulnerability in ndijkstra Mollie Forms

Mollie Forms <= 2.6.3 - Missing Authorization

Published · Updated

Follow this CVE+ Monitor Mollie Forms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.5%
The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to export payment data collected by this plugin.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
ndijkstra · Mollie Forms
Related CVEs — ndijkstra Mollie Forms

In the same product, most dangerous first.

CVE-2024-1400MEDIUMMollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post DuplicationEPSS 0.3%CVE-2024-2368MEDIUMMollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post DuplicationEPSS 0.2%