Skip to content
Unknown Mstore Api vulnerabilities
-
mstore api, unknown mstore api +1 more
MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter
CVE-2026-97219
4.3 Medium
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet
CVE-2026-18234
6.5 Medium
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion
CVE-2026-18233
6.5 Medium
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-16041
7.5 High
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR
CVE-2026-16039
6.5 Medium
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
CVE-2026-16038
9.1 Critical
-
mstore api, unknown mstore api +1 more
MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication
CVE-2026-16030
8.1 High
-
inspireui mstore api, mstore api +1 more
MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
CVE-2023-3131
4.3 Medium
-
inspireui mstore api, mstore api +1 more
MStore API < 3.9.7 - Settings Update via CSRF
CVE-2023-3209
3.5 Low
-
inspireui mstore api, mstore api +1 more
MStore API < 3.9.8 - Unauthenticated Blind SQLi
CVE-2023-3077
9.8 Critical
-
inspireui mstore api, mstore api +1 more
MStore API < 3.9.9 - Unauthenticated Privilege Escalation
CVE-2023-3076
Public exploit
9.8 Critical
-
inspireui mstore api, mstore api +1 more
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
CVE-2021-24148
9.8 Critical