WordPress Plugin Vulnerabilities

Paytium: Mollie payment forms & donations < 5.0.3 - Unauthenticated Privilege Escalation

Description

The plugin is vulnerable to Privilege Escalation. This makes it possible for unauthenticated attackers to elevate their privileges.

Affects Plugins

Plugin icon
paytium
Fixed in 5.0.3

References

CVE
CVE-2026-56030
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/9ef3e6c7-b75a-4afc-b1c7-6e74b0c894a9

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
9.8 (critical)

Miscellaneous

Original Researcher
Nabil Irawan
Verified
No
WPVDB ID
0b045091-4f30-4630-8f1a-01b71e17660c

Timeline

Publicly Published
2026-06-23 (about 3 months ago)
Added
2026-07-02 (about 3 months ago)
Last Updated
2026-10-12 (about 4 days ago)

Other

Published
Title
Published
2023-08-21
Title
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
Published
2026-08-31
Title
Nokri - Job Board WordPress Theme < 1.6.7 - Unauthenticated Privilege Escalation via 'token' Parameter
Published
2020-01-16
Title
WP Database Reset < 3.15 - Privilege Escalation
Published
2025-10-30
Title
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
Published
2020-01-28
Title
Wordable < 3.1.2 - Plugin's Authentication Bypass