Description
The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address.
INFO
Published Date :
2025-11-21T13:41:07.728Z
Last Modified :
2025-11-21T14:23:36.421Z
Source :
WPScan
AFFECTED PRODUCTS
The following products are affected by CVE-2025-11127 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-11127.
