Critical · published May 25, 2023
CVSS calls it critical at 9.8. It sits in the 99.3th percentile for exploit probability.
🚨 A simple API request could let attackers log in as any user, including administrators, on your WordPress site! 🔥 Think of it like a door that only needs a nameplate to let people in — if the door won't check who's behind that nameplate, anyone can saunter in pretending to be someone else. That's exactly how this authentication bypass works! This vulnerability means an unauthenticated attacker could gain full access and control over an existing user's account, including the ability to change settings, post malicious content, or even lock out legitimate users. Imagine the chaos if a hacker gains admin powers!
Think of it like a door that only needs a nameplate to let people in — if the door won't check who's behind that nameplate, anyone can saunter in pretending to be someone else. That's exactly how this authentication bypass works! The MStore API plugin for WordPress is vulnerable to authentication bypass due to inadequate verification of user credentials during add listing requests, allowing any attacker with knowledge of a user ID to impersonate that user.
This vulnerability means an unauthenticated attacker could gain full access and control over an existing user's account, including the ability to change settings, post malicious content, or even lock out legitimate users. Imagine the chaos if a hacker gains admin powers! Update the MStore API plugin to version 3.9.3 or later immediately to mitigate this vulnerability. Additionally, review user access logs and restrict user ID exposure to enhance security. Don't forget to check your other plugins for similar issues! You've got this! Just follow these steps, and you’ll have your WordPress secure in no time! 🛡️