CVE-2023-2732
CRITICAL EXPLOITED NUCLEIMStore API < 3.9.2 - Unauthenticated Authentication Bypass via Listing REST API
Title source: llmExploitation Summary
CVE-2023-2732 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 5 public exploits from researchers including RandomRobbieBF, Ap0dexMe0, ThatNotEasy. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python script that exploits an authentication bypass vulnerability in the MStore API WordPress plugin (versions <= 3.9.2). The exploit fetches user IDs via the REST API and crafts a request to the vulnerable endpoint to bypass authentication and log in as any user.
Description
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id.
Exploits (5)
This repository contains a functional Python script that exploits an authentication bypass vulnerability in the MStore API WordPress plugin (versions <= 3.9.2). The exploit fetches user IDs via the REST API and crafts a request to the vulnerable endpoint to bypass authentication and log in as any user.
This repository contains a Python-based scanner for detecting the Mstore WordPress API vulnerability (CVE-2023-2732). It checks for the presence of the vulnerable plugin and attempts to identify potential exploitation paths, but does not include functional exploit code.
The repository contains a Python-based scanner for detecting the presence of the Mstore WordPress API vulnerability (CVE-2023-2732). It checks for plugin installation, version, and potential exploitation paths but does not include functional exploit code.
The repository contains a functional Python script that exploits CVE-2023-2732, an authentication bypass vulnerability in WordPress. The script retrieves user IDs via the WP REST API and crafts a malicious request to bypass authentication, granting admin access.
This repository contains a Python-based scanner for detecting the presence of the Mstore WordPress API plugin and checking for potential vulnerabilities. It does not include exploit code but scans for plugin installation and version information.
Nuclei Templates (1)
http.html:/wp-content/plugins/mstore-api/
body=/wp-content/plugins/mstore-api/
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H