CVE-2023-7294

Name of the Vulnerable Software and Affected Versions The Paytium: Mollie payment forms & donations plugin for WordPress versions up to, and including, 4.3.7

Description The issue is related to unauthorized data modification due to a missing capability check on the create mollie profile function. This allows authenticated attackers with subscriber-level access to create a mollie payment profile.

Recommendations For versions up to, and including, 4.3.7, update to a version higher than 4.3.7 to resolve the issue. As a temporary workaround, consider restricting access to the create mollie profile function to prevent unauthorized data modification.