← CVE Intelligence

CVE-2023-3209

MStore API < 3.9.7 - Settings Update via CSRF PUBLISHED

Description (CNA)

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.

Affected (CNA)

Vendor / productVersions
Unknown / MStore APIaffected 0 before 3.9.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.