HIGH7.5Packagist
GHSA-rc52-c4hv-w89p· CVE-2026-68500Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook
Modified: 7/31/2026
package
Packagist/sylius/mollie-plugin
pkg:packagist/sylius/mollie-plugin
MEDIUM6.5Packagist
GHSA-x83g-979r-f5fh· CVE-2026-68501Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII
Modified: 7/31/2026