Lucene search

CVE-2024-6328

🗓️ 12 Jul 2024 11:11:15Reported by WordfenceType

The MStore plugin in WordPress allows authentication bypass via 'phone' parameter due to insufficient verification, leading to potential unauthorized access to user accounts

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-6328 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass	12 Jul 202410:59	–	vulnrichment
Patchstack	WordPress MStore API Plugin <= 4.14.7 is vulnerable to Broken Authentication	12 Jul 202400:00	–	patchstack
NVD	CVE-2024-6328	12 Jul 202411:15	–	nvd
Cvelist	CVE-2024-6328 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass	12 Jul 202410:59	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 8, 2024 to July 14, 2024)	18 Jul 202415:33	–	wordfence

Vulners

Vulnrichment

Node

inspireui mstore_api_create_native_android_&_ios_apps_on_the_cloudRange≤4.14.7wordpress

[
  {
    "vendor": "inspireui",
    "product": "MStore API – Create Native Android & iOS Apps On The Cloud",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.14.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/17d8e2e9-5e3f-433b-be1a-6ea765eba547
plugins	www.plugins.trac.wordpress.org/changeset/3115231/
plugins	www.plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jul 2024 11:15Current

9.2High risk

Vulners AI Score9.2

CVSS39.8

EPSS0.02135

SSVC