by Kastro
Paper/Archive/CVE-2023-3076

CVE-2023-3076

Unknown MStore API — MStore API < 3.9.9 - Unauthenticated Privilege Escalation

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
56
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.3.823 × 2016.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features.

Affected

ProductAffectedFixed inSource
MStore API< 3.9.93.9.9CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitwpscan.com/vulnerability/ac662436-29d7-4ea6-84e1-f9e229b44f5b