Sensitive Data Exposure in Doneren met Mollie Plugin for WordPress

CVE-2021-4377

What is CVE-2021-4377?

The Doneren met Mollie plugin for WordPress is susceptible to sensitive data exposure through the dmm_export_donations() function, which is triggered by the admin_post_dmm_export hook. Due to a lack of proper capability checks, authenticated attackers can exploit this vulnerability to access and download a CSV file containing sensitive donor information, compromising data privacy.

References