[HIGH] Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook

PKSA-b8jy-36rm-9gkc CVE-2026-68500 GHSA-rc52-c4hv-w89p

Affected package: sylius/mollie-plugin

Affected version: >=3.3.0,<3.3.1|>=3.0.0,<3.2.4|<2.2.8

Reported by:
GitHub