inspireui records
28 published records for vendor inspireui.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 17.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)8
- CWE-288 Authentication Bypass Using an Alternate Path or Channel7
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-862 Missing Authorization3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-287 Improper Authentication1
The weakness classes this vendor ships most often: where to look.
CWEAll records
28 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
59Plan | CVE-2023-2732Proof of concept | MStore API <= 3.9.2 - Authentication Bypassinspireui · mstore api · CWE-288 | Critical9.8 | — | 67.2% | May 24, 2023 |
41Plan | CVE-2023-3077Proof of concept | MStore API < 3.9.8 - Unauthenticated Blind SQLiinspireui · mstore api · CWE-89 | Critical9.8 | — | 5.5% | Jul 10, 2023 |
40Plan | CVE-2023-3197Proof of concept | MStore API <= 4.0.1 - Unauthenticated SQL Injectioninspireui · mstore api · CWE-89 | Critical9.8 | — | 3.8% | Jun 23, 2023 |
40Plan | CVE-2023-2734Proof of concept | MStore API <= 3.9.1 - Authentication Bypassinspireui · mstore api · CWE-288 | Critical9.8 | — | 3.8% | May 24, 2023 |
40Plan | CVE-2023-3277Proof of concept | MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalationinspireui · mstore api · CWE-288 | Critical9.8 | — | 3.4% | Nov 3, 2023 |
40Plan | CVE-2021-24148No exploit | MStore API < 3.2.0 - Authentication Bypass With Sign In With Appleinspireui · mstore api · CWE-287 | Critical9.8 | — | 3.3% | Mar 18, 2021 |
40Plan | CVE-2023-3076Proof of concept | MStore API < 3.9.9 - Unauthenticated Privilege Escalationinspireui · mstore api · CWE-862 | Critical9.8 | — | 2.1% | Jul 10, 2023 |
39Monitor | CVE-2020-36713No exploit | MStore API <= 2.1.5 - Authentication Bypassinspireui · mstore api · CWE-288 | Critical9.8 | — | 1.6% | Jun 6, 2023 |
39Monitor | CVE-2023-2733No exploit | MStore API <= 3.9.0 - Authentication Bypassinspireui · mstore api · CWE-288 | Critical9.8 | — | 1.2% | May 24, 2023 |
39Monitor | CVE-2023-45055No exploit | WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injectioninspireui · mstore api · CWE-89 | Critical9.8 | — | 0.6% | Nov 6, 2023 |
39Monitor | CVE-2024-6328No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypassinspireui · mstore api · CWE-288 | Critical9.8 | — | 0.6% | Jul 12, 2024 |
35Monitor | CVE-2024-8242No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Uploadinspireui · mstore api · CWE-434 | High8.8 | — | 0.7% | Sep 13, 2024 |
35Monitor | CVE-2023-50878No exploit | WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)inspireui · mstore api · CWE-352 | High8.8 | — | 0.2% | Dec 29, 2023 |
32Monitor | CVE-2024-7628No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeoverinspireui · mstore api · CWE-288 | High8.1 | — | 0.6% | Aug 14, 2024 |
30Monitor | CVE-2022-47614No exploit | WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injectioninspireui · mstore api · CWE-89 | High7.5 | — | 0.5% | Jun 23, 2023 |
29Monitor | CVE-2025-3438No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalationinspireui · mstore api · CWE-269 | High7.3 | — | 0.3% | May 2, 2025 |
26Monitor | CVE-2024-11179No exploit | MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injectioninspireui · mstore api · CWE-89 | Medium6.5 | — | 0.4% | Nov 20, 2024 |
26Monitor | CVE-2024-8269No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registrationinspireui · mstore api · CWE-284 | Medium6.5 | — | 0.3% | Sep 13, 2024 |
21Monitor | CVE-2024-12042No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)inspireui · mstore api · CWE-434 | Medium5.4 | — | 0.3% | Dec 13, 2024 |
17Monitor | CVE-2023-3131No exploit | MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Updateinspireui · mstore api · CWE-862 | Medium4.3 | — | 0.6% | Jul 10, 2023 |
17Monitor | CVE-2023-3200No exploit | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Updateinspireui · mstore api · CWE-352 | Medium4.3 | — | 0.3% | Jun 13, 2023 |
17Monitor | CVE-2023-3198No exploit | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Updateinspireui · mstore api · CWE-352 | Medium4.3 | — | 0.3% | Jun 13, 2023 |
17Monitor | CVE-2023-3201No exploit | MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Updateinspireui · mstore api · CWE-352 | Medium4.3 | — | 0.3% | Jun 13, 2023 |
17Monitor | CVE-2023-3203No exploit | MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Updateinspireui · mstore api · CWE-352 | Medium4.3 | — | 0.3% | Jun 13, 2023 |
17Monitor | CVE-2025-4683No exploit | MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creationinspireui · mstore api · CWE-862 | Medium4.3 | — | 0.3% | May 26, 2025 |
- CVE-2023-273259Plan
MStore API <= 3.9.2 - Authentication Bypass
CriticalCVSS 9.8Proof of conceptEPSS 67%inspireui · mstore apiMay 24, 2023
- CVE-2023-307741Plan
MStore API < 3.9.8 - Unauthenticated Blind SQLi
CriticalCVSS 9.8Proof of conceptEPSS 5%inspireui · mstore apiJul 10, 2023
- CVE-2023-319740Plan
MStore API <= 4.0.1 - Unauthenticated SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 3%inspireui · mstore apiJun 23, 2023
- CVE-2023-273440Plan
MStore API <= 3.9.1 - Authentication Bypass
CriticalCVSS 9.8Proof of conceptEPSS 3%inspireui · mstore apiMay 24, 2023
- CVE-2023-327740Plan
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
CriticalCVSS 9.8Proof of conceptEPSS 3%inspireui · mstore apiNov 3, 2023
- CVE-2021-2414840Plan
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
CriticalCVSS 9.8No exploitEPSS 3%inspireui · mstore apiMar 18, 2021
- CVE-2023-307640Plan
MStore API < 3.9.9 - Unauthenticated Privilege Escalation
CriticalCVSS 9.8Proof of conceptEPSS 2%inspireui · mstore apiJul 10, 2023
- CVE-2020-3671339Monitor
MStore API <= 2.1.5 - Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 1%inspireui · mstore apiJun 6, 2023
- CVE-2023-273339Monitor
MStore API <= 3.9.0 - Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 1%inspireui · mstore apiMay 24, 2023
- CVE-2023-4505539Monitor
WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%inspireui · mstore apiNov 6, 2023
- CVE-2024-632839Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 0%inspireui · mstore apiJul 12, 2024
- CVE-2024-824235Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 0%inspireui · mstore apiSep 13, 2024
- CVE-2023-5087835Monitor
WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%inspireui · mstore apiDec 29, 2023
- CVE-2024-762832Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
HighCVSS 8.1No exploitEPSS 0%inspireui · mstore apiAug 14, 2024
- CVE-2022-4761430Monitor
WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection
HighCVSS 7.5No exploitEPSS 0%inspireui · mstore apiJun 23, 2023
- CVE-2025-343829Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation
HighCVSS 7.3No exploitEPSS 0%inspireui · mstore apiMay 2, 2025
- CVE-2024-1117926Monitor
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
MediumCVSS 6.5No exploitEPSS 0%inspireui · mstore apiNov 20, 2024
- CVE-2024-826926Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
MediumCVSS 6.5No exploitEPSS 0%inspireui · mstore apiSep 13, 2024
- CVE-2024-1204221Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
MediumCVSS 5.4No exploitEPSS 0%inspireui · mstore apiDec 13, 2024
- CVE-2023-313117Monitor
MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiJul 10, 2023
- CVE-2023-320017Monitor
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiJun 13, 2023
- CVE-2023-319817Monitor
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiJun 13, 2023
- CVE-2023-320117Monitor
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiJun 13, 2023
- CVE-2023-320317Monitor
MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiJun 13, 2023
- CVE-2025-468317Monitor
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
MediumCVSS 4.3No exploitEPSS 0%inspireui · mstore apiMay 26, 2025