CVE-2023-3076

Summary

CVE-2023-3076 is a vulnerability affecting the MStore API WordPress plugin before version 3.9.9. This issue allows visitors to create user accounts with any chosen role through the plugin's wholesale REST API endpoint. However, it's important to note that this vulnerability is only exploitable if the site owner has paid for the plugin's pro features. This security flaw could potentially lead to unauthorized access or privilege escalation within the WordPress site.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.