Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

331 matches found

OSV
OSV•added 2023/06/14 2:15 a.m.•2 views

CVE-2023-3203

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS7.2AI score0.00316EPSS
Exploits0References3
OSV
OSV•added 2023/06/14 2:15 a.m.•1 views

CVE-2023-3198

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS6.3AI score0.00316EPSS
Exploits0References3
OSV
OSV•added 2023/06/14 2:15 a.m.•2 views

CVE-2023-3200

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS5.7AI score0.00316EPSS
Exploits0References3
OSV
OSV•added 2023/06/14 2:15 a.m.•2 views

CVE-2023-3201

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordertitle function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrato...

4.3CVSS5.7AI score
Exploits0References3
NVD
NVD•added 2023/06/14 2:15 a.m.•25 views

CVE-2023-3203

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS4.3AI score0.00316EPSS
Exploits0References3
NVD
NVD•added 2023/06/14 2:15 a.m.•9 views

CVE-2023-3200

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS4.3AI score0.00316EPSS
Exploits0References3
NVD
NVD•added 2023/06/14 2:15 a.m.•21 views

CVE-2023-3198

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS4.3AI score0.00316EPSS
Exploits0References3
NVD
NVD•added 2023/06/14 2:15 a.m.•14 views

CVE-2023-3201

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordertitle function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrato...

4.3CVSS4.3AI score0.00316EPSS
Exploits0References3
Prion
Prion•added 2023/06/14 2:15 a.m.•24 views

Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS4.4AI score0.00316EPSS
Exploits0References3Affected Software1
Prion
Prion•added 2023/06/14 2:15 a.m.•17 views

Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS4.4AI score0.00316EPSS
Exploits0References3Affected Software1
Prion
Prion•added 2023/06/14 2:15 a.m.•16 views

Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordertitle function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrato...

4.3CVSS4.4AI score0.00316EPSS
Exploits0References3Affected Software1
Prion
Prion•added 2023/06/14 2:15 a.m.•18 views

Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS4.3AI score0.00316EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•8 views

CVE-2023-3201 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordertitle function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrato...

4.3CVSS6.5AI score0.00316EPSS
Exploits0References3
Cvelist
Cvelist•added 2023/06/14 1:47 a.m.•25 views

CVE-2023-3201 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordertitle function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrato...

4.3CVSS4.7AI score0.00316EPSS
Exploits0References3
CVE
CVE•added 2023/06/14 1:47 a.m.•45 views

CVE-2023-3201

CVE-2023-3201 – MStore API (WordPress) : CSRF due to missing nonce validation in mstore_update_new_order_title. Unauthenticated attackers can forge requests to update new order titles by tricking an admin. Affected versions:

4.3CVSS4.7AI score0.00316EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•13 views

CVE-2023-3198 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS6.5AI score0.00316EPSS
Exploits0References3
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•9 views

CVE-2023-3200 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS6.5AI score0.00316EPSS
Exploits0References3
Cvelist
Cvelist•added 2023/06/14 1:47 a.m.•16 views

CVE-2023-3198 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS4.7AI score0.00316EPSS
Exploits0References3
CVE
CVE•added 2023/06/14 1:47 a.m.•53 views

CVE-2023-3198

The CVE-2023-3198 entry refers to the MStore API WordPress plugin (

4.3CVSS4.7AI score0.00316EPSS
Exploits0References3Affected Software1
CVE
CVE•added 2023/06/14 1:47 a.m.•38 views

CVE-2023-3200

CVE-2023-3200 affects the WordPress MStore API plugin prior to 3.9.7 (

4.3CVSS4.7AI score0.00316EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder