CVE-2023-2732

CVE-2023-2732 Mstore WordPress APIs Vulnerable Scanner 是一个强大且用户友好的工具，旨在通过检查 WordPress 网站的 API 端点来识别潜在漏洞。 该扫描器旨在帮助网站所有者、开发人员和安全专业人员主动识别其 WordPress 安装中的安全弱点，从而增强其网站的整体安全态势。 截图 要求 Python3.7+ 支持的操作系统 Linuxer Wingays 开始使用 $ git clone https://github.com/Pari-Malam/CVE-2023-2732 $ cd CVE-2023-2732 $...

EUVD-2026-54386

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order fully paid without paying and obtain goods or services...

CVE-2026-16030 MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to forge a token and take over that user's account, including...

CVE-2025-4683

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createblog function in all versions up to, and including, 4.17.5. This makes it possible for authenticated attackers, wit...

CVE-2023-3199

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordertitle function. This makes it possible for unauthenticated attackers to update status order title via a forged request granted they can trick a site...

CVE-2023-3131

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both...