WordPress plugin
Paytium: Mollie payment forms & donations security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High3
- Medium11
- Low0
All Paytium: Mollie payment forms & donations vulnerabilities
- High8.1Unauthenticated PHP Object Injection
≤5.0.5Update to 5.0.6
- Critical9.8Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter
≤5.0.3Update to 5.0.4
- Critical9.8Unauthenticated Privilege Escalation
≤5.0.2Update to 5.0.3
- Medium5.3Unauthenticated Full Path Disclosure
≤4.4.11Update to 4.4.12
- Medium4.3Missing Authorization
≤4.4.10Update to 4.4.11
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
≤4.4.2Update to 4.4.3
- High7.1Missing Authorization in 'create_mollie_profile'
≤4.3.7Update to 4.4
- Medium5.4Missing Authorization in 'update_profile_preference'
≤4.3.7Update to 4.4
- Medium5.4Missing Authorization in 'paytium_sw_save_api_keys'
≤4.3.7Update to 4.4
- Medium4.3Missing Authorization in 'check_for_verified_profiles'
≤4.3.7Update to 4.4
- High7.1Missing Authorization in 'create_mollie_account'
≤4.3.7Update to 4.4
- Medium4.3Missing Authorization in 'check_mollie_account_details'
≤4.3.7Update to 4.4
- Medium5.4Missing Authorization in 'pt_cancel_subscription'
≤4.3.7Update to 4.4
- Medium4.3Missing Authorization in 'paytium_notice_dismiss'
≤4.3.7Update to 4.4
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
≤4.3.6Update to 4.3.7
- Medium6.4Stored Cross-Site Scripting
≤3.1.1Update to 3.1.2
Paytium: Mollie payment forms & donations: common questions
Does Paytium: Mollie payment forms & donations have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Paytium: Mollie payment forms & donations: 2 critical, 3 high, 11 medium. None are known to affect version null.
How do I check which version of Paytium: Mollie payment forms & donations I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Paytium: Mollie payment forms & donations vulnerability?
CVE-2026-114196, published Oct 22, 2026: Paytium: Mollie payment forms & donations <= 5.0.5 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).
Is any Paytium: Mollie payment forms & donations vulnerability listed in CISA KEV?
No. None of the known Paytium: Mollie payment forms & donations vulnerabilities is currently listed in the CISA KEV catalog.