Lucene search

WordfenceCVE-2024-6328

HistoryJul 12, 2024 - 11:15 a.m.

CVE-2024-6328

2024-07-1211:15:11

Wordfence

web.nvd.nist.gov

mstore plugin

wordpress

authentication bypass

insufficient verification

user accounts

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

27.3%

JSON

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the ‘phone’ parameter of the ‘firebase_sms_login’ and ‘firebase_sms_login_v2’ functions. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email address or phone number. Additionally, if a new email address is supplied, a new user account is created with the default role, even if registration is disabled.

Affected configurations

Vulners

Vulnrichment

Node

inspireuimstore_api_–_create_native_android_\&_ios_apps_on_the_cloudRange≤4.14.7wordpress

VendorProductVersionCPE
inspireuimstore_api_–_create_native_android_\&_ios_apps_on_the_cloud*cpe:2.3:a:inspireui:mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
inspireui	mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud	*	cpe:2.3:a:inspireui:mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud::::::wordpress::*

CNA Affected

[
  {
    "vendor": "inspireui",
    "product": "MStore API – Create Native Android & iOS Apps On The Cloud",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.14.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L699

plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L714

plugins.trac.wordpress.org/changeset/3115231/

www.wordfence.com/threat-intel/vulnerabilities/id/17d8e2e9-5e3f-433b-be1a-6ea765eba547?source=cve

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

27.3%

JSON

Related for CVE-2024-6328