https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-2368.htmlhttps://patchthecve.com/cve/CVE-2024-2368.htmlWed, 17 Jun 2026 07:24:24 +0000MEDIUM 4.3: The Mollie Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.13. This is due to missing or incorrect nonce validation on the duplicateForm() function. This makes it possible for unauthenticated attackers to duplicate forms via a forged rhttps://patchthecve.com/cve/CVE-2024-1645.htmlhttps://patchthecve.com/cve/CVE-2024-1645.htmlWed, 17 Jun 2026 07:04:41 +0000MEDIUM 4.3: The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to export paymenhttps://patchthecve.com/cve/CVE-2024-1400.htmlhttps://patchthecve.com/cve/CVE-2024-1400.htmlWed, 17 Jun 2026 07:04:09 +0000MEDIUM 4.3: The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to duplicatehttps://patchthecve.com/cve/CVE-2021-4377.htmlhttps://patchthecve.com/cve/CVE-2021-4377.htmlWed, 17 Jun 2026 04:19:36 +0000MEDIUM 6.5: The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmm_export_donations() function which is called via the admin_post_dmm_export hook due to missing capability checks. This can allow authenticated attackers to extract