Published: 25/05/2023 Updated: 07/11/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it possible for unauthenticated malicious users to log in as any existing user on the site, such as an administrator, if they have access to the user id.

Vulnerable Product	Search on Vulmon	Subscribe to Product
inspireui mstore api

MStore API <= 3.9.2 - Authentication Bypass

CVE-2023-2732 MStore API <= 392 - Authentication Bypass wwwwordfencecom/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 392 This is due to insufficient verification on the user being supplie

Perform With Massive Authentication Bypass (Wordpress Mstore-API)

CVE-2023-2732 Mstore WordPress APIs Vulnerable Scanner is a powerful and user-friendly tool designed to identify potential vulnerabilities in WordPress sites by inspecting their API endpoints The scanner aims to assist website owners, developers, and security professionals in proactively identifying security weaknesses in their WordPress installations, thereby enhancing the o

Python 2.7

WP-CVE-2023-2732 python 27 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Saweria $: saweriaco/Shin403 Trakteer $: trakteerid/shin403 Refrence : githubcom/RandomRobbieBF/CVE-2023-2732

NVD-CWE-Other https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2916124%40mstore-api&old=2915729%40mstore-api&sfp_email=&sfph_mail=#file58 https://plugins.trac.wordpress.org/browser/mstore-api/tags/3.9.0/controllers/listing-rest-api/class.api.fields.php#L1079 https://www.wordfence.com/threat-intel/vulnerabilities/id/f00761a7-fe24-49a3-b3e3-a471e05815c1?source=cve https://nvd.nist.gov https://github.com/RandomRobbieBF/CVE-2023-2732

CVE-2023-2732

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect