CVE-2024-8269

Name of the Vulnerable Software and Affected Versions: MStore API plugin for WordPress versions up to, and including, 4.15.3

Description: The issue arises from the plugin not checking if user registration is enabled before creating a user account through the register() function. This allows unauthenticated attackers to create user accounts on sites even when user registration is disabled and plugin functionality is not activated.

Recommendations: For versions up to, and including, 4.15.3, update to a version higher than 4.15.3 to resolve the issue. As a temporary workaround, consider disabling the register() function until a patch is available.