Sylius MolliePlugin

• CVE-2026-68501 Medium 6.5 Sylius Mollie Plugin: Unauthenticated IDOR leaks order token and customer PII 0.9%
• CVE-2026-68500 High 7.5 Sylius Mollie Plugin: Payment status forgery via the payment webhook 0.7%