PT-2024-38902

Name of the Vulnerable Software and Affected Versions: MStore API plugin for WordPress versions up to, and including, 4.15.3 Description: The issue arises from the plugin not checking if user registration is enabled before creating a user account through the register function. This allows...

PT-2023-24014

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress versions up to, and including, 4.10.7 Description The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation due to improper implementation of the Apple login...

PT-2023-23568

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress affected versions not specified Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update firebase server key function. This allows unauthenticated...

PT-2023-23552

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress affected versions not specified Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update status order message function. This allows unauthenticated...

PT-2023-23569

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress affected versions not specified Description The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore update limit product function. This makes...

PT-2023-23567

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress affected versions not specified Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update new order title function. This allows unauthenticated attackers...