CVE-2023-3131
MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
Affected products
Unknown · MStore APIWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →