Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

PT-2023-23552

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress affected versions not specified Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update status order message function. This allows unauthenticated...