MStore API, ae12464a8d35fdcda47994a509b21b1abea6d8e6
- CVE, Research URL
- Home page URL
- Application
- Published on
- Oct 05, 2021
- Research Description
- MStore API – Create Native Android & iOS Apps On The Cloud [mstore-api] < 3.4.5 MStore API < 3.4.5 - Arbitrary File Upload The MStore API plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization via the api/flutter_woo/config_file REST endpoint in versions before 3.4.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
- Affected versions
-
max 3.4.5.
- Status
-
vulnerable