Skip to content
OpenAdvisories

Product · ndijkstra

Mollie Forms

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-2368

    Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication

    The Mollie Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.13. This is due to missing or incorrect nonce validation on the duplicateForm() function. This makes it possible for unauthenticated at…

    ndijkstra Mollie Forms Web / CMS
  • Medium 4.3
    CVE-2024-1645

    Mollie Forms <= 2.6.3 - Missing Authorization

    The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subs…

    ndijkstra Mollie Forms Web / CMS
  • Medium 4.3
    CVE-2024-1400

    Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication

    The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with …

    ndijkstra Mollie Forms Web / CMS