2 lines
4.1 KiB
JSON
2 lines
4.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Doneren met Mollie","vendor":"ndijkstra","versions":[{"lessThanOrEqual":"2.8.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:wobbie:doneren_met_mollie:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"4C363B38-B1CF-4305-90F8-DA3068DDAF1A","versionEndIncluding":"2.8.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmm_export_donations() function which is called via the admin_post_dmm_export hook due to missing capability checks. This can allow authenticated attackers to extract a CSV file that contains sensitive information about the donors."},{"lang":"es","value":"El plugin Doneren met Mollie para WordPress es vulnerable a la exposición de datos sensibles en versiones hasta la v2.8.5 inclusive, a través de la función \"dmm_export_donations()\" que se llama a través del hook \"admin_post_dmm_export\" debido a la falta de comprobaciones de capacidad. Esto puede permitir a atacantes autenticados extraer un archivo CSV que contiene información sensible sobre los donantes."}],"id":"CVE-2021-4377","lastModified":"2026-06-17T04:19:36.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security@wordfence.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2021-4377","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-12-20T23:26:45.619794Z","version":"2.0.3"}}]},"published":"2023-06-07T02:15:15.340","references":[{"source":"security@wordfence.com","tags":["Exploit"],"url":"https://blog.nintechnet.com/information-disclosure-vulnerability-fixed-in-wordpress-doneren-met-mollie-plugin/"},{"source":"security@wordfence.com","tags":["Patch"],"url":"https://plugins.trac.wordpress.org/changeset/2459548"},{"source":"security@wordfence.com","tags":["Exploit"],"url":"https://wpscan.com/vulnerability/36afc442-9634-498e-961e-4c935880cd2b"},{"source":"security@wordfence.com","tags":["Third Party Advisory"],"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed99a056-42c6-4540-950e-12f8b547b64d?source=cve"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"url":"https://blog.nintechnet.com/information-disclosure-vulnerability-fixed-in-wordpress-doneren-met-mollie-plugin/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://plugins.trac.wordpress.org/changeset/2459548"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"url":"https://wpscan.com/vulnerability/36afc442-9634-498e-961e-4c935880cd2b"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed99a056-42c6-4540-950e-12f8b547b64d?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"security@wordfence.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|