CVE-2023-3131

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2023-07-10

Last modified

2024-11-12

Affected products

• Mstore Api (Inspireui)
• Mstore Api (Unknown)

References

• https://wpscan.com/vulnerability/970735f1-24bb-441c-89b6-5a0959246d6c