CPE

Cpe:2.3:a:mstore:mstore_api:::*:::wordpress::

1 brief RSS

Authentication Bypass in Mstore Api Plugin for WordPress via JWT Forgery

The Mstore Api plugin for WordPress (<= 4.20.0) is vulnerable to authentication bypass via JWT forgery, allowing unauthenticated attackers to impersonate any user by crafting illegitimate Firebase Phone Auth tokens.

Mstore Api wordpress cve authentication-bypass web-application

1t 1c 2h ago

Cpe:2.3:a:mstore:mstore_api:*:*:*:*:*:wordpress:*:*

Authentication Bypass in Mstore Api Plugin for WordPress via JWT Forgery

Cpe:2.3:a:mstore:mstore_api:::*:::wordpress::