PT-2023-22960 · WordPress · Mstore Api

Truoc Phan · Published 2023-07-10 · Updated 2025-01-25 · CVE-2023-3076

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The MStore API WordPress plugin, specifically versions before 3.9.9, is affected by a security issue that allows visitors to create user accounts with a role of their choice via the wholesale REST API endpoint. This issue is only exploitable if the site owner has paid to access the plugin's pro features. An exploit is available, and tools such as MSAPer can be used to automatically check and exploit this issue, allowing for unauthenticated privilege escalation, including mass addition of admin users and PHP file upload. The affected versions are all MStore API WordPress plugin versions before 3.9.9. The exploit is available on GitHub: https://github.com/im-hanzou/MSAPer #MStoreAPI #WordPress #UnauthenticatedPrivilegeEscalation #MSAPer #OffensiveSecurity #Exploit #PrivilegeEscalation #RESTAPI #WordPressPlugin

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-3076

Affected Products

Mstore Api

References · 12

• 🔥 https://github.com/im-hanzou/MSAPer · Exploit
• 🔥 https://wpscan.com/vulnerability/ac662436-29d7-4ea6-84e1-f9e229b44f5b · Exploit
• https://osv.dev/vulnerability/CVE-2023-3076 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3076 · Security Note
• https://github.com/joshkar/X-Recon · Note
• ❌ https://github.com/im-hanzou/MSAPer.git · Note, Deleted
• https://t.me/cybersecuritytechnologies/9060 · Telegram Post
• https://twitter.com/TheHackForce/status/1704725082185109988 · Twitter Post
• https://t.me/cvenotify/54620 · Telegram Post
• https://twitter.com/hack_git/status/1706189487762534727 · Twitter Post
• https://t.me/ckure/15179 · Telegram Post
• https://twitter.com/ksg93rd/status/1704930584215073099 · Twitter Post