CVE-2026-122062

Name of the Vulnerable Software and Affected Versions Pronamic Pay versions prior to 11.1.0 Pronamic Pay doneren met Mollie versions prior to 1.7.1

Description These plugins do not restrict access to stored form submissions through the REST API. This allows unauthenticated users to read messages submitted by visitors through bundled forms and extract sensitive user or configuration data.

Recommendations Update Pronamic Pay to version 11.1.0 or later. Update Pronamic Pay doneren met Mollie to version 1.7.1 or later.