Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
sylius/mollie-plugin
sylius/mollie-plugin vulnerabilities (Packagist)
2 vulnerabilities.
sylius/mollie-plugin
Packagist
Sylius Mollie Plugin: Unauthenticated IDOR leaks order token and customer PII
CVE-2026-68501
Fix available
6.5
Medium
July 30, 2026
sylius/mollie-plugin
Packagist
Sylius Mollie Plugin: Payment status forgery via the payment webhook
CVE-2026-68500
Fix available
7.5
High
July 30, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open