CVE-2023-3131

MediumCVSS 4.3

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

The MStore API WordPress plugin before version 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.

Risk Assessment

The lack of proper security may lead to unauthorized access to plugin functions, posing a risk to user data and system integrity.

Recommendation

It is recommended to update the MStore API plugin to version 3.9.7 or later to ensure proper security for AJAX actions.

Original NVD description (English source)

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.