low3.5
CVE-2023-3209
The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
Impact
The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inspireui | Mstore Api | before 3.9.7 |