Paytium
Paytium: vulnerabilidades y CVE
Paytium tiene 14 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses2
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-18467 | Crítica (9.8) | 0.39% | — | 24 sept 2026 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wp_hash()/hash_equals() signature gate… |
| CVE-2026-56030 | Crítica (9.8) | 0.48% | — | 26 jun 2026 | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. |
| CVE-2025-24552 | Media (5.3) | 0.51% | — | 24 ene 2025 | Generation of Error Message Containing Sensitive Information vulnerability in paytiumsupport Paytium paytium allows Retrieve Embedded Sensitive Data.This issue affects Paytium: from n/a through <= 4.4.11. |
| CVE-2024-51667 | Media (4.3) | 0.32% | — | 31 dic 2024 | Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through <= 4.4.10. |
| CVE-2023-7294 | Media (6.5) | 0.34% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and… |
| CVE-2023-7293 | Media (4.3) | 0.25% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and… |
| CVE-2023-7292 | Media (4.3) | 0.28% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and… |
| CVE-2023-7291 | Alta (8.1) | 0.36% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and… |
| CVE-2023-7290 | Media (4.3) | 0.25% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versions up to, and… |
| CVE-2023-7289 | Media (4.3) | 0.28% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions up to, and… |
| CVE-2023-7288 | Media (4.3) | 0.28% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versions up to, and… |
| CVE-2023-7287 | Media (5.4) | 0.32% | — | 16 oct 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in versions up to, and… |
| CVE-2024-25099 | Media (5.4) | 0.42% | — | 13 mar 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David de Boer Paytium: Mollie payment forms & donations allows Stored XSS.This issue affects Paytium: Mollie payment… |
| CVE-2022-4042 | Media (4.8) | 0.47% | — | 26 dic 2022 | The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.