Lucene search
+L

9 matches found

NVD
NVD
•added 2026/06/11 12:16 p.m.•32 views

CVE-2023-32959

Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: from n/a through 1.3.2...

4.3CVSS0.00184EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/11 10:50 a.m.•26 views

EUVD-2023-60590

Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: from n/a through 1.3.2...

4.3CVSS5.4AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/11 10:50 a.m.•46 views

CVE-2023-32959 WordPress MetroStore theme <= 1.3.2 - Broken Access Control

Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: from n/a through 1.3.2...

4.3CVSS0.00184EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/11 10:50 a.m.•54 views

CVE-2023-32959

CVE-2023-32959 is a WordPress Broken Access Control issue affecting multiple themes (e.g., MetroStore, SparkleStore, Kathmag, Online eStore, Appzend, SpiderMag, BuzzStore, Fitness Park, Sparklestore, etc.) with vulnerable versions generally prior to or equal to 1.x.y depending on the theme. The r...

4.3CVSS8.1AI score0.00184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/11 10:50 a.m.•18 views

CVE-2023-32959 WordPress MetroStore theme <= 1.3.2 - Broken Access Control

Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: from n/a through 1.3.2...

4.3CVSS8.1AI score0.00184EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/11 12:00 a.m.•29 views

WordPress plugin MetroStore 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS8.3AI score0.00184EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/11 12:00 a.m.•1 views

WordPress Theme: sparklestore: CVE-2023-32959: Missing Authorization

Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: from n/a through 1.3.2...

4.3CVSS8.2AI score0.00184EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/16 12:00 a.m.•38 views

PT-2026-48642

Name of the Vulnerable Software and Affected Versions MetroStore versions prior to 1.3.3 Description A missing authorization issue in the metrostore component allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 1.3.2...

4.3CVSS7.7AI score0.00184EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2023/05/16 12:00 a.m.•15 views

WordPress MetroStore Theme <= 1.3.2 is vulnerable to Broken Access Control

Software MetroStore Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32959 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID d697dae9407a Credits Dave Jong Patchstack Required...

5.9AI score0.00184EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder