MStore API – Create Native Android & iOS Apps On The Cloud

Уязвимости

• CVE-2026-13447без авторизации≤ 4.20.0

  MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

  Критич. 9.8

• CVE-2024-6328без авторизации≤ 4.14.7

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass

  Критич. 9.8

• CVE-2023-3277без авторизации≤ 4.10.7

  MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

  Критич. 9.8

• CVE-2023-3197без авторизации≤ 4.0.1

  MStore API <= 4.0.1 - Unauthenticated SQL Injection

  Критич. 9.8

• CVE-2023-2734без авторизации≤ 3.9.1

  MStore API <= 3.9.1 - Authentication Bypass

  Критич. 9.8

• CVE-2023-2733без авторизации≤ 3.9.0

  MStore API <= 3.9.0 - Authentication Bypass

  Критич. 9.8

• CVE-2023-2732без авторизации≤ 3.9.2

  MStore API <= 3.9.2 - Authentication Bypass

  Критич. 9.8

• CVE-2023-45055нужен вход≤ 4.0.6

  WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2021-47933без авторизации

  WordPress MStore API 2.0.6 Arbitrary File Upload

  Критич. 9.3

• CVE-2023-50878без авторизации · нужен клик≤ 4.10.1

  WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-8242подписчик+≤ 4.15.3

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload

  Высокий 8.8

• CVE-2026-27543без авторизации≤ 4.20.0

  WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability

  Высокий 8.1

• CVE-2024-7628без авторизации≤ 4.15.2

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover

  Высокий 8.1

• CVE-2022-47614без авторизации≤ 3.9.7

  WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection

  Высокий 7.5

• CVE-2025-3438без авторизации≤ 4.17.4

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation

  Высокий 7.3

• CVE-2026-57375без авторизации≤ 4.18.4

  WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-54817без авторизации≤ 4.18.4

  WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability

  Средний 6.5

• CVE-2024-8269без авторизации≤ 4.15.3

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration

  Средний 6.5

• CVE-2024-11179подписчик+≤ 4.15.7

  MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection

  Средний 6.5

• CVE-2024-12042подписчик+≤ 4.16.4

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)

  Средний 5.4

• CVE-2023-3202без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update

  Средний 4.3

• CVE-2023-3199без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update

  Средний 4.3

• CVE-2023-3203без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update

  Средний 4.3

• CVE-2023-3201без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update

  Средний 4.3

• CVE-2023-3200без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update

  Средний 4.3

• CVE-2023-3198без авторизации · нужен клик≤ 3.9.6

  MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

  Средний 4.3

• CVE-2026-3568подписчик+≤ 4.18.3

  MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update

  Средний 4.3

• CVE-2025-4683подписчик+≤ 4.17.5

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation

  Средний 4.3