What is GHSA-4435-94rm-8hr8?

GHSA-4435-94rm-8hr8 is a security advisory published by GitHub Security Advisories with Medium severity. The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin...

Which CVE IDs does GHSA-4435-94rm-8hr8 cover?

GHSA-4435-94rm-8hr8 covers the following CVE IDs: CVE-2026-122062. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4435-94rm-8hr8?

GHSA-4435-94rm-8hr8 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-4435-94rm-8hr8MediumCVSS 5.3

The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin...

Vendor

GitHub Security Advisories

Published

November 8, 2026

Last Modified

November 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-122062 →

📋 Description

The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-122062
https://wpscan.com/vulnerability/02674a18-1985-4a35-a59e-906ce4a61972
https://github.com/advisories/GHSA-4435-94rm-8hr8