Skip to content
OpenAdvisories

Product · Sylius

MolliePlugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-68500

    Sylius Mollie Plugin: Payment status forgery via the payment webhook

    Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /{_locale}/update-payment payment webhook accepts attacker-controlled id and orderId parameters but does not verify…

    Sylius MolliePlugin sylius/mollie-plugin Packagist