Unauthorized Access Risk in Pronamic Pay and Mollie WordPress Plugins
CVE-2026-122062
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 8 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-122062?
The Pronamic Pay WordPress plugin and its Mollie extension prior to their respective versions are vulnerable to unauthorized access. This issue stems from insufficient restrictions on stored form submissions accessible via the REST API. As a result, unauthenticated users may exploit this weakness to retrieve sensitive data submitted through forms by visitors, posing significant risks to user privacy and data security.
Affected Version(s)
Pronamic Pay 0 < 11.1.0
Pronamic Pay doneren met Mollie 0 < 1.7.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.