Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
InspireuiMstore Api3.9.6

6 matches found

CVE
CVE•added 2023/06/14 2:15 a.m.•44 views

CVE-2023-3198

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site ...

4.3CVSS4.7AI score0.00128EPSS
CVE
CVE•added 2023/07/12 5:15 a.m.•44 views

CVE-2023-3199

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_title function. This makes it possible for unauthenticated attackers to update status order title via a forged request granted they can trick a site admi...

4.3CVSS4.7AI score0.00128EPSS
CVE
CVE•added 2023/07/12 5:15 a.m.•43 views

CVE-2023-3202

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_firebase_server_key function. This makes it possible for unauthenticated attackers to update the firebase server key to push notification when order status changed vi...

4.3CVSS4.7AI score0.00086EPSS
CVE
CVE•added 2023/06/14 2:15 a.m.•42 views

CVE-2023-3203

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS4.6AI score0.00082EPSS
CVE
CVE•added 2023/06/14 2:15 a.m.•36 views

CVE-2023-3201

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administra...

4.3CVSS4.7AI score0.00086EPSS
CVE
CVE•added 2023/06/14 2:15 a.m.•32 views

CVE-2023-3200

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site admini...

4.3CVSS4.7AI score0.00086EPSS