CVE-2026-122062

Published 8 November 2026 · tracked since 8 November 2026

Description

The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-124684 MEDIUM 5.1
• CVE-2026-124591 MEDIUM 5.5
• CVE-2026-123460 HIGH 7.1
• CVE-2026-120838 MEDIUM 6.5
• CVE-2026-120367 HIGH 7.5
• CVE-2026-115252 CRITICAL 10
• CVE-2026-113702 MEDIUM 4.3
• CVE-2026-106466 HIGH 7.5
• CVE-2026-106008 MEDIUM 5.3
• CVE-2026-121764 HIGH 7.1

→ Open the live CVE board · all tools