CVE-2023-7292

Name of the Vulnerable Software and Affected Versions The Paytium: Mollie payment forms & donations plugin for WordPress versions up to, and including, 4.3.7

Description The issue is related to unauthorized notification dismissal due to a missing capability check on the paytium notice dismiss function. This allows authenticated attackers with subscriber-level access to dismiss admin notices.

Recommendations For versions up to, and including, 4.3.7, update to a version that includes a fix for the missing capability check in the paytium notice dismiss function to prevent unauthorized notification dismissal. As a temporary workaround, consider restricting access to the paytium notice dismiss function to prevent exploitation.