VulnCheck KEV: CVE-2023-2734

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This makes it possible for unauthenticated...

CVE-2023-2734: Authentication Bypass Using an Alternate Path or Channel

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This makes it possible for unauthenticated...

PT-2023-21071

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress versions up to, and including, 3.9.1 Description The issue is related to authentication bypass due to insufficient verification of the user being supplied during the cart sync from mobile REST API request throug...