Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/07/2023 Updated: 07/11/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

The MStore API WordPress plugin prior to 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features.

Vulnerable Product	Search on Vulmon	Subscribe to Product
inspireui mstore api

Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add Admin + PHP File Upload)

MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 399 - Unauthenticated Privilege Escalation (Mass Add Admin + PHP File Upload) Using GNU Parallel You must have parallel for run this tool If you found error like "$'\r': command not found" just do "dos2unix msapers

CWE-862 https://wpscan.com/vulnerability/ac662436-29d7-4ea6-84e1-f9e229b44f5b https://nvd.nist.gov https://github.com/im-hanzou/MSAPer

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-3076

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect