Lucene search
WpvulndbWPVDB-ID:8FC62C0D-17DE-4598-B365-1781D5B3FC19HistoryMay 22, 2023 - 12:00 a.m.
MStore API < 3.9.2 - Authentication Bypass
2023-05-2200:00:00
wpscan.com
22
mstore api
authentication bypass
plugin
rest api
unauthenticated users
login
arbitrary user id
software
EPSS
0.002
Percentile
55.9%
The plugin does not properly verify the user provided when syncing their cart via its REST API, allowing unauthenticated users to login as an arbitrary user by providing their ID
Related
cve
cve
CVE-2023-2734
2023-05-25 03:15:08
prion
prion
Authentication flaw
2023-05-25 03:15:00
nvd
nvd
CVE-2023-2734
2023-05-25 03:15:08
cvelist
cvelist
CVE-2023-2734
2023-05-25 02:05:31
wallarmlab
wallarmlab
OWASP APIsec Top-10 2023 Is Here | API Security Newsletter
2023-06-15 14:33:48
wordfence
wordfence
2023’s Critical WordPress Vulnerabilities and How They Work
2024-02-12 19:11:21