CVE-2023-3203

Name of the Vulnerable Software and Affected Versions MStore API plugin for WordPress (affected versions not specified)

Description The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore update limit product function. This makes it possible for unauthenticated attackers to update the limit of the number of products per category to use cache data in the home screen via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.