Critical · 9.1 CVE-2023-6090 EUVD-2023-58346GHSA-6699-4qcw-gf5x

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

Published Feb 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Mollie Product: Mollie Payments for WooCommerce Category: Web / CMS

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.

Affected products

Vendor	Product	Affected	Fixed
Mollie	Mollie Payments for WooCommerce	≤ 7.3.11	—

References

https://patchstack.com/database/vulnerability/mollie-payments-for-woocommerce/wordpress-mollie-payments-for-woocommerce-plugin-7-3-11-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry