Mollie Payments for WooCommerce — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Mollie Payments for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Mollie

CVE ID	Title	CVSS	Severity	Published
CVE-2026-101166	Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_order	-	-	2026-11-04
CVE-2026-101165	Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_pay	-	-	2026-11-04
CVE-2025-68501	WordPress Mollie Payments for WooCommerce plugin <= 8.1.1 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-02-20
CVE-2025-39362	WordPress Mollie Payments for WooCommerce plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability CWE-862	6.5	Medium	2025-07-02
CVE-2024-6448	Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure CWE-200	5.3	Medium	2024-08-28
CVE-2023-6090	WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload CWE-434	9.1	Critical	2024-02-29

All 6 known CVE vulnerabilities affecting Mollie Payments for WooCommerce with full Chinese analysis, references, and POCs where available.