Skip to content
Threat Feed
Subscribe

Vendor

Mstore

1 brief RSS
critical advisory

Authentication Bypass in Mstore Api Plugin for WordPress via JWT Forgery

The Mstore Api plugin for WordPress (<= 4.20.0) is vulnerable to authentication bypass via JWT forgery, allowing unauthenticated attackers to impersonate any user by crafting illegitimate Firebase Phone Auth tokens.

Mstore Api wordpress cve authentication-bypass web-application
1t 1c