https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:36:54.627167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-3199 CVE-2023-3199 — MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update 2026-10-06T20:36:54.628324+00:00

Affected: inspireui MStore API – Create Native Android & iOS Apps On The Cloud

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_title function. This makes it possible for unauthenticated attackers to update status order title via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.