VULNERABILITY INTELLIGENCE

CVE-2024-1645

CVSS score4.3 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-03-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to export payment data collected by this plugin.

Weakness classification

  • CWE-862: Missing Authorization

Primary references