WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mstore-api
Published
2023-06-23
Title
MStore API < 3.9.8 - Unauthenticated SQL Injection
Slug
mstore-api
Published
2023-06-23
Title
MStore API < 4.0.2 - Unauthenticated SQL Injection
Slug
mstore-api
Published
2023-06-19
Title
MStore API < 4.10.8 - Unauthenticated Privilege Escalation
Slug
mstore-api
Published
2023-10-03
Title
MStore API < 4.0.7 - Subscriber+ SQLi
Slug
mstore-api
Published
2023-12-26
Title
MStore API < 4.10.2 - Cross-Site Request Forgery
Slug
mstore-api
Published
2024-07-11
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.0 - Authentication Bypass
Slug
mstore-api
Published
2024-08-14
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.3 - Authentication Bypass to Account Takeover
Slug
mstore-api
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Unauthorized User Registration
Slug
mstore-api
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Slug
mstore-api
Published
2024-11-19
Title
MStore API < 4.15.8 - Authenticated (Subscriber+) SQL Injection
Slug
mstore-api
Published
2024-12-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.16.5 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Slug
mstore-api
Published
2025-05-01
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.5 - Unauthenticated Limited Privilege Escalation
Slug
mstore-api
Published
2025-05-26
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.17.6 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
Slug
mstore-api
Published
2026-04-08
Title
MStore API < 4.18.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update
Slug
mstore-api
Published
2026-06-17
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.19.0 - Missing Authorization
Slug
mstore-api
Published
2026-07-07
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.19.0 - Missing Authorization
Slug
mstore-api
Published
2026-08-03
Title
MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication
Slug
mstore-api
Published
2026-08-03
Title
MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
Slug
mstore-api
Published
2026-08-03
Title
MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR
Slug
mstore-api
Published
2026-08-03
Title
MStore API < 4.21.0 - Unauthenticated Product Review Creation
Slug
mstore-api
Published
2026-08-11
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.21.0 - Unauthenticated Privilege Escalation
Slug
mstore-api
Published
2026-08-27
Title
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion
Slug
mstore-api
Published
2026-08-27
Title
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet
Slug
mstore-api
Published
2026-09-04
Title
MStore API < 4.21.1 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
Slug
mstoreapp-mobile-app
Published
2025-10-31
Title
Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation