Lucene search
PRIOn knowledge basePRION:CVE-2023-3077HistoryJul 10, 2023 - 4:15 p.m.
Sql injection
2023-07-1016:15:00
PRIOn knowledge base
www.prio-n.com
3
sql injection
wordpress
mstore api
blind sql
woocommerce-appointments
0.059 Low
EPSS
Percentile
93.5%
The MStore API WordPress plugin before 3.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a Blind SQL injection exploitable by unauthenticated users. This is only exploitable if the site owner elected to pay to get access to the plugins’ pro features, and uses the woocommerce-appointments plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mstore_api | lt | 3.9.8 |
Related
wpvulndb
wpvulndb
MStore API < 3.9.8 - Unauthenticated Blind SQLi
2023-06-19 00:00:00
wpexploit
wpexploit
MStore API < 3.9.8 - Unauthenticated Blind SQLi
2023-06-19 00:00:00
nuclei
nuclei
MStore API < 3.9.8 - SQL Injection
2024-05-28 02:08:36
cvelist
cvelist
CVE-2023-3077 MStore API < 3.9.8 - Unauthenticated Blind SQLi
2023-07-10 12:40:19
nvd
nvd
CVE-2023-3077
2023-07-10 16:15:54
cve
cve
CVE-2023-3077
2023-07-10 16:15:54
wordfence
wordfence