Description
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Pronamic Pay | < 11.1.0 | 11.1.0 |
| — | Pronamic Pay doneren met Mollie | < 1.7.1 | 1.7.1 |
References
- https://wpscan.com/vulnerability/02674a18-1985-4a35-a59e-906ce4a61972/ exploit vdb-entry technical-description