CVE-2023-3076

Katalog CVE

CVSS 9.8 · Critical EPSS 2,2%

Kerentanan Missing Authorization pada inspireui mstore api. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features.

Rincian

Terbit di NVD

10 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 81,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/ac662436-29d7-4ea6-84e1-f9e229b44f5b exploit · advisory pihak ketiga