Plugin icon

MStore API – Create Native Android & iOS Apps On The Cloud

mstore-api

Vulnerabilities:

26

Last Updated:

June 12, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-07-07
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.19.0 - Missing Authorization
Fixed in
Fixed in 4.19.0
CVSS
5.3 (medium)
Published
2026-06-17
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.19.0 - Missing Authorization
Fixed in
Fixed in 4.19.0
CVSS
5.3 (medium)
Published
2026-04-08
Title
MStore API < 4.18.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update
Fixed in
Fixed in 4.18.4
CVSS
4.3 (medium)
Published
2025-05-26
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.6 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
Fixed in
Fixed in 4.17.6
CVSS
4.3 (medium)
Published
2025-05-01
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.5 - Unauthenticated Limited Privilege Escalation
Fixed in
Fixed in 4.17.5
CVSS
6.5 (medium)
Published
2024-12-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.16.5 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Fixed in
Fixed in 4.16.5
CVSS
5.4 (medium)
Published
2024-11-19
Title
MStore API < 4.15.8 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 4.15.8
CVSS
6.5 (medium)
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Fixed in
Fixed in 4.15.4
CVSS
4.3 (medium)
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Unauthorized User Registration
Fixed in
Fixed in 4.15.4
CVSS
7.3 (high)
Published
2024-08-14
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.3 - Authentication Bypass to Account Takeover
Fixed in
Fixed in 4.15.3
CVSS
8.1 (high)
Published
2024-07-11
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.0 - Authentication Bypass
Fixed in
Fixed in 4.15.0
CVSS
9.8 (critical)
Published
2023-12-26
Title
MStore API < 4.10.2 - Cross-Site Request Forgery
Fixed in
Fixed in 4.10.2
CVSS
4.3 (medium)
Published
2023-10-03
Title
MStore API < 4.0.7 - Subscriber+ SQLi
Fixed in
Fixed in 4.0.7
CVSS
7.7 (high)
Published
2023-06-23
Title
MStore API < 4.0.2 - Unauthenticated SQL Injection
Fixed in
Fixed in 4.0.2
CVSS
9.8 (critical)
Published
2023-06-23
Title
MStore API < 3.9.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.9.8
CVSS
7.5 (high)
Published
2023-06-19
Title
MStore API < 3.9.9 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 3.9.9
CVSS
9.8 (critical)
Published
2023-06-19
Title
MStore API < 3.9.8 - Unauthenticated Blind SQLi
Fixed in
Fixed in 3.9.8
CVSS
8.6 (high)
Published
2023-06-19
Title
MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
Fixed in
Fixed in 3.9.7
CVSS
4.3 (medium)
Published
2023-06-19
Title
MStore API < 4.10.8 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 4.10.8
CVSS
9.8 (critical)
Published
2023-06-13
Title
MStore API < 3.9.7 - Multiple CSRF
Fixed in
Fixed in 3.9.7
CVSS
4.3 (medium)
Published
2023-05-24
Title
MStore API < 3.9.3 - Authentication Bypass
Fixed in
Fixed in 3.9.3
CVSS
9.8 (critical)
Published
2023-05-22
Title
MStore API < 3.9.2 - Authentication Bypass
Fixed in
Fixed in 3.9.2
CVSS
9.8 (critical)
Published
2023-05-17
Title
MStore API < 3.9.1 - Authentication Bypass
Fixed in
Fixed in 3.9.1
CVSS
9.8 (critical)
Published
2021-10-05
Title
MStore API < 3.4.5 - Unauthenticated PHP File Upload
Fixed in
Fixed in 3.4.5
CVSS
9.8 (critical)
Published
2021-02-02
Title
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
Fixed in
Fixed in 3.2.0
CVSS
7.5 (high)
Published
2020-03-11
Title
MStore API < 2.1.6 - Unauthenticated Arbitrary Account Creation/Edition
Fixed in
Fixed in 2.1.6
CVSS
8.6 (high)