Description
WordPress是一款建立网站、博客或应用程序的开源软件，MStore API是WordPress的一款插件。 Wordpress MStore API 插件 2.0.6 版本存在文件上传漏洞，攻击者可通过该漏洞直接上传一个webshell到服务器上，获取服务器权限，进⽽控制整个web服务器。
WordPress MStore API 插件存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.vulncheck.com/advisories/wordpress-mstore-api-arbitrary-file-upload
https://nvd.nist.gov/vuln/detail/CVE-2021-47933
https://www.exploit-db.com/exploits/50379
https://www.cnvd.org.cn/flaw/show/CNVD-2021-29439
https://www.sherlockforensics.com/blog/2026-05-10-cve-2021-47933.html
https://github.com/advisories/GHSA-5c3p-jrjh-vwpm
https://cve.imfht.com/detail/CVE-2021-47933
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-mstore-api-create-native-android-ios-apps-on-the-cloud-arbitrary-file-upload-3-4-4/