| Package | Affected versions | Patched versions |
|---|---|---|
| mstore api | < 3.2.0 | 3.2.0 |
A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free