CVE-2021-4377

MITTEL 6.5CVE-2021-4377 · Published 07/06/2023 · updated 17/06/2026

Kurz gesagt

CVE-2021-4377 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in doneren met mollie (wobbie).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.0%, höher als bei 63.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
doneren met mollie wobbie	`≤ 2.8.5`	No fix yet

Description

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmm_export_donations() function which is called via the admin_post_dmm_export hook due to missing capability checks. This can allow authenticated attackers to extract a CSV file that contains sensitive information about the donors.

References

blog.nintechnet.com/information-disclosure-vulnerability-fixed-in-wordpress-doneren-met-mollie-plugin · Exploit
plugins.trac.wordpress.org/changeset/2459548 · Patch
wpscan.com/vulnerability/36afc442-9634-498e-961e-4c935880cd2b · Exploit
wordfence.com/threat-intel/vulnerabilities/id/ed99a056-42c6-4540-950e-12f8b547b64d · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free