Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2023-2732 — Authentication Bypass Using an Alternate Path or Channel in Mstore API Create Native Android IOS Apps ON THE Cloud

CWE-288 — Authentication Bypass Using an Alternate Path or Channel5 documents5 sources
Severity
9.8CRITICALNVD
EPSS
90.0%
top 0.42%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Inspireui Mstore API Create Native Android IOS Apps ON THE CloudInspireui Mstore API
Timeline
PublishedMay 25

Description

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-q639-qhhx-5j5j: The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3↗2023-05-25
▶
CVEList
MStore API <= 3.9.2 - Authentication Bypass↗2023-05-25
▶
VulnCheck
MStore API plugin for WordPress Add Listing REST API Authentication Bypass↗2023
▶

💥Exploits & PoCs

1
Nuclei
MStore API <= 3.9.2 - Authentication Bypass
▶
CVE-2023-2732 — CRITICAL severity | cvebase