The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-07-10T12:41:17.016Z
Updated: 2024-08-02T06:48:07.151Z
Reserved: 2023-06-06T19:39:10.707Z
Link: CVE-2023-3131
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-07-10T16:15:55.080
Modified: 2023-11-07T04:17:57.837
Link: CVE-2023-3131
Redhat
No data.