Skip to content
Threat Feed
Subscribe

Product

Craft Commerce (Mollie Integration)

1 brief RSS
high advisory

Mollie Craft Commerce webhook authentication bypass (CVE-2026-115937)

An authentication bypass vulnerability in the Craft Commerce Mollie integration allows unauthenticated attackers to mark arbitrary transactions as paid by manipulating webhook parameters.

Craft Commerce web-application authentication-bypass commerce-vulnerability
1c