CVE-2023-3198

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress (affected versions not specified)

Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update status order message function. This allows unauthenticated attackers to update status order messages via a forged request if they can trick a site administrator into performing an action, such as clicking on a link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.