Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Paytium: Mollie payment forms & donations Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 14 vulnerability records associated with Paytium: Mollie payment forms & donations, published between 2020 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

14Total records
1Critical
2High
11Medium
0Low
0Informational
14Patched records
0Currently marked unpatched
2020-05-12First disclosure
2026-06-23Latest disclosure
13 of 14CVE coverage

Use this history

Check and watch Paytium: Mollie payment forms & donations.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Year-by-Year Timeline

YearRecordsRelative volume
202011 records
202211 records
202388 records
202422 records
202511 records
202611 records

Severity Breakdown

SeverityRecordsShare
Critical17.1%
High214.3%
Medium1178.6%

Vulnerability-Type Breakdown

Missing Authorization

9 records64.3%

First: 2023. Latest: 2024.

Cross-Site Scripting

3 records21.4%

First: 2020. Latest: 2024.

Information Disclosure

1 record7.1%

First: 2025. Latest: 2025.

Privilege Escalation

1 record7.1%

First: 2026. Latest: 2026.

Patch Status

Patched
14
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 5.0.3
  • 4.4.12
  • 4.4.11
  • 4.4.3
  • 4.4
  • 4.3.7
  • 3.1.2

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-5.0.2Paytium: Mollie payment forms & donations <= 5.0.2 - Unauthenticated Privilege EscalationJune 23, 20265.0.3Critical
*-4.4.11Paytium <= 4.4.11 - Unauthenticated Full Path DisclosureJanuary 24, 20254.4.12Medium
*-4.4.10Paytium <= 4.4.10 - Missing AuthorizationNovember 1, 20244.4.11Medium
*-4.4.2Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodeFebruary 12, 20244.4.3Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'March 6, 20234.4High
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'March 6, 20234.4Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss'March 6, 20234.4Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'March 6, 20234.4High
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles'March 6, 20234.4Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_sw_save_api_keys'March 6, 20234.4Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'March 6, 20234.4Medium
*-4.3.7Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'March 6, 20234.4Medium
*-4.3.6Paytium <= 4.3.6 - Authenticated (Admin+) Stored Cross-Site ScriptingNovember 30, 20224.3.7Medium
*-3.1.1Paytium <= 3.1.1 - Stored Cross-Site ScriptingMay 12, 20203.1.2Medium

Selected source records

Latest Records

CriticalCVE-2026-56030

Paytium: Mollie payment forms & donations <= 5.0.2 - Unauthenticated Privilege Escalation

Published: June 23, 2026

Affected versions
*-5.0.2
Patched versions
5.0.3
Original Wordfence record
MediumCVE-2025-24552

Paytium <= 4.4.11 - Unauthenticated Full Path Disclosure

Published: January 24, 2025

Affected versions
*-4.4.11
Patched versions
4.4.12
Original Wordfence record
MediumCVE-2024-51667

Paytium <= 4.4.10 - Missing Authorization

Published: November 1, 2024

Affected versions
*-4.4.10
Patched versions
4.4.11
Original Wordfence record
MediumCVE-2024-25099

Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Published: February 12, 2024

Affected versions
*-4.4.2
Patched versions
4.4.3
Original Wordfence record
MediumCVE-2023-7287

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
MediumCVE-2023-7288

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
MediumCVE-2023-7289

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_sw_save_api_keys'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
MediumCVE-2023-7290

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record

Highest-Severity Records

CriticalCVE-2026-56030

Paytium: Mollie payment forms & donations <= 5.0.2 - Unauthenticated Privilege Escalation

Published: June 23, 2026

Affected versions
*-5.0.2
Patched versions
5.0.3
Original Wordfence record
HighCVE-2023-7291

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
HighCVE-2023-7294

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
Medium

Paytium <= 3.1.1 - Stored Cross-Site Scripting

Published: May 12, 2020

Affected versions
*-3.1.1
Patched versions
3.1.2
Original Wordfence record
MediumCVE-2024-25099

Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Published: February 12, 2024

Affected versions
*-4.4.2
Patched versions
4.4.3
Original Wordfence record
MediumCVE-2022-4042

Paytium <= 4.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Published: November 30, 2022

Affected versions
*-4.3.6
Patched versions
4.3.7
Original Wordfence record
MediumCVE-2023-7287

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record
MediumCVE-2023-7288

Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'

Published: March 6, 2023

Affected versions
*-4.3.7
Patched versions
4.4
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory