Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in MStore API 4.0.1

  • Severity: critical
  • Status: Fixed
  • Publication: June 23, 2023

The MStore API plugin for WordPress is vulnerable to a type of attack called “Unauthenticated Blind SQL Injection”. This means that in versions of the plugin up to and including 4.0.1, people who are not authorized to access the plugin can exploit a security flaw in the plugin that allows them to add additional SQL queries to existing ones. By doing this, they can access sensitive information from the database.

Detected in:

MStore API fixed vulnerable versions: >= * <= 4.0.1
MStore API – Create Native Android & iOS Apps On The Cloud fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.