PT-2023-22960 · WordPress · Mstore Api

Truoc Phan · CVE-2023-3076 · Publicado 2023-07-10 · Atualizado 2025-01-25

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The MStore API WordPress plugin, specifically versions before 3.9.9, is affected by a security issue that allows visitors to create user accounts with a role of their choice via the wholesale REST API endpoint. This issue is only exploitable if the site owner has paid to access the plugin's pro features. An exploit is available, and tools such as MSAPer can be used to automatically check and exploit this issue, allowing for unauthenticated privilege escalation, including mass addition of admin users and PHP file upload. The affected versions are all MStore API WordPress plugin versions before 3.9.9. The exploit is available on GitHub: https://github.com/im-hanzou/MSAPer #MStoreAPI #WordPress #UnauthenticatedPrivilegeEscalation #MSAPer #OffensiveSecurity #Exploit #PrivilegeEscalation #RESTAPI #WordPressPlugin

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-3076

Produtos afetados

Mstore Api

Referências · 12

• 🔥 https://github.com/im-hanzou/MSAPer · Exploit
• 🔥 https://wpscan.com/vulnerability/ac662436-29d7-4ea6-84e1-f9e229b44f5b · Exploit
• https://github.com/joshkar/X-Recon · Nota
• ❌ https://github.com/im-hanzou/MSAPer.git · Nota, Deleted
• https://t.me/cybersecuritytechnologies/9060 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-3076 · Aviso do Fabricante
• https://twitter.com/TheHackForce/status/1704725082185109988 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-3076 · Nota de Segurança
• https://t.me/cvenotify/54620 · Publicação no Telegram
• https://twitter.com/hack_git/status/1706189487762534727 · Publicação no Twitter
• https://t.me/ckure/15179 · Publicação no Telegram
• https://twitter.com/ksg93rd/status/1704930584215073099 · Publicação no Twitter