CVE-2023-3209
MStore API < 3.9.7 - Settings Update via CSRF
The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
Affected products
Unknown · MStore APIWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →