Skip to content
OpenAdvisories

Product · mstore

MStore API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-47933

    WordPress MStore API 2.0.6 Arbitrary File Upload

    WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the REST API endpoint. Attackers can upload PHP files with arbitrary names to the config_fil…

    mstore MStore API