Vulnerabilities and Security Researches

MStore API, CVE-2021-24148

CVE, Research URL: CVE-2021-24148
Home page URL: Security reports for MStore API
Application: MStore API
Published on: Mar 18, 2021
Research Description: A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.
Affected versions: Min -, max 2.1.6.
Status: vulnerable