Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:488117C3-B032-4F33-A6C5-DD5702F9E774
HistoryNov 15, 2023 - 12:00 a.m.

MStore API < 4.0.7 - Subscriber+ SQLi

2023-11-1500:00:00
wpscan.com
10
mstore api
sql injection
security vulnerability
authenticated users
subscribers
software

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

33.0%

JSON

Description The plugin does not properly sanitise and escape some parameters before using them in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers

Related

prion 1
cvelist 1
vulnrichment 1
cve 1
nvd 1
wordfence 1
prion
prion
Sql injection
2023-11-06 09:15:00
cvelist
cvelist
CVE-2023-45055 WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection
2023-11-06 08:30:45
vulnrichment
vulnrichment
CVE-2023-45055 WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection
2023-11-06 08:30:45
cve
cve
CVE-2023-45055
2023-11-06 09:15:08
nvd
nvd
CVE-2023-45055
2023-11-06 09:15:08
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 2, 2023 to October 8, 2023)
2023-10-12 15:22:05

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

33.0%

JSON
Related for WPVDB-ID:488117C3-B032-4F33-A6C5-DD5702F9E774
prion1cvelist1vulnrichment1cve1nvd1wordfence1