CVE-2021-4377 in Doneren met Mollie Plugin
Summary
by MITRE • 06/07/2023
The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.8.5 via the dmm_export_donations() function which is called via the admin_post_dmm_export hook due to missing capability checks. This can allow authenticated attackers to extract a CSV file that contains sensitive information about the donors.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 04/09/2026
The Doneren met Mollie plugin for WordPress presents a significant security vulnerability classified as sensitive data exposure through its dmm_export_donations() function. This weakness exists within version 2.8.5 and earlier releases, creating an exploitable condition that undermines the confidentiality of donor information. The vulnerability manifests through the admin_post_dmm_export hook which lacks proper authentication and authorization controls, allowing unauthorized access to donation data that should remain protected.
The technical flaw stems from insufficient capability checks within the plugin's administrative functionality. When the dmm_export_donations() function is invoked through the admin_post_dmm_export hook, no verification occurs to ensure that the requesting user possesses adequate privileges to access donor information. This design oversight creates a path for authenticated attackers to exploit the functionality without proper authorization, effectively bypassing the intended access controls that should restrict data export operations to authorized administrators only.
The operational impact of this vulnerability extends beyond simple data exposure, as it compromises the integrity of donor privacy and organizational trust. The exported CSV file contains sensitive information including donor names, contact details, donation amounts, and potentially transaction identifiers that could be used for identity theft, fraud, or other malicious activities. This exposure particularly affects organizations relying on the plugin for charitable donations, as the breach could damage their reputation and lead to regulatory compliance issues under data protection frameworks such as gdpr.
Organizations utilizing this plugin face substantial risk from both internal and external threat actors who may exploit this vulnerability to gain unauthorized access to donor databases. The attack surface is particularly concerning given that the vulnerability requires only authentication to the WordPress admin interface, making it accessible to attackers who have obtained valid credentials through phishing, credential stuffing, or other compromise techniques. This aligns with attack patterns documented in the mitre att&ck framework under credential access and data exposure tactics.
Security mitigations for this vulnerability should include immediate plugin updates to versions that address the missing capability checks, implementation of proper access controls for administrative functions, and regular security audits of WordPress plugins. Organizations should also consider implementing network segmentation, monitoring for unauthorized administrative access attempts, and establishing incident response procedures for data exposure events. The vulnerability demonstrates the importance of proper input validation and access control implementation as outlined in cwe categories 285 and 311, emphasizing the need for robust authentication mechanisms in web applications to prevent unauthorized data access and maintain information confidentiality.