Mstore vulnerabilities

Products

• Api 19

Newest

• mstore api, unknown mstore api +1 more MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter CVE-2026-97219 4.3 MediumOctober 2, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet CVE-2026-18234 6.5 MediumAugust 29, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion CVE-2026-18233 6.5 MediumAugust 29, 2026
• fluxbuilder mstore api, mstore api +1 more WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability CVE-2026-27543 8.1 HighAugust 13, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.0 - Unauthenticated Product Review Creation CVE-2026-16041 7.5 HighAugust 7, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR CVE-2026-16039 6.5 MediumAugust 7, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways CVE-2026-16038 9.1 CriticalAugust 7, 2026
• mstore api, unknown mstore api +1 more MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication CVE-2026-16030 8.1 HighAugust 7, 2026
• fluxbuilder mstore api, mstore api +1 more WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability CVE-2026-57375 6.5 MediumJuly 13, 2026
• fluxbuilder mstore api, mstore api +1 more WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability CVE-2026-54817 6.5 MediumJune 17, 2026
• mstore api WordPress MStore API 2.0.6 Arbitrary File Upload CVE-2021-47933 9.3 CriticalMay 10, 2026
• inspireui mstore api, mstore api +1 more WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-50878 5.4 MediumDecember 29, 2023
• inspireui mstore api, mstore api +1 more WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection CVE-2023-45055 8.5 HighNovember 6, 2023
• inspireui mstore api, mstore api +1 more MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update CVE-2023-3131 4.3 MediumJuly 10, 2023
• inspireui mstore api, mstore api +1 more MStore API < 3.9.7 - Settings Update via CSRF CVE-2023-3209 3.5 LowJuly 10, 2023
• inspireui mstore api, mstore api +1 more MStore API < 3.9.8 - Unauthenticated Blind SQLi CVE-2023-3077 9.8 CriticalJuly 10, 2023
• inspireui mstore api, mstore api +1 more MStore API < 3.9.9 - Unauthenticated Privilege Escalation CVE-2023-3076 Public exploit 9.8 CriticalJuly 10, 2023
• inspireui mstore api, mstore api +1 more WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection CVE-2022-47614 7.5 HighJune 23, 2023
• inspireui mstore api, mstore api +1 more MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple CVE-2021-24148 9.8 CriticalMarch 18, 2021