What’s Vulnerable › Products

inspireui MStore API – Create Native Android & iOS Apps On The Cloud vulnerabilities

37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your inspireui MStore API – Create Native Android & iOS Apps On The Cloud version is affected

Latest inspireui MStore API – Create Native Android & iOS Apps On The Cloud vulnerabilities

• CVE-2026-97219 — MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter (CVSS 4.3)
• CVE-2026-13447 — MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery (CVSS 9.8)
• CVE-2026-18234 — MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet (CVSS 6.5)
• CVE-2026-18233 — MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion (CVSS 6.5)
• CVE-2026-16041 — MStore API < 4.21.0 - Unauthenticated Product Review Creation (CVSS 7.5)
• CVE-2026-16039 — MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR (CVSS 6.5)
• CVE-2026-16038 — MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways (CVSS 9.1)
• CVE-2026-16030 — MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication (CVSS 8.1)
• CVE-2026-3568 — MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update (CVSS 4.3)
• CVE-2025-4683 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation (CVSS 4.3)
• CVE-2025-3438 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation (CVSS 7.3)
• CVE-2024-12042 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting) (CVSS 5.4)
• CVE-2024-11179 — MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
• CVE-2024-8269 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration (CVSS 6.5)
• CVE-2024-8242 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload (CVSS 8.8)
• CVE-2024-7628 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover (CVSS 8.1)
• CVE-2024-6328 — MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass (CVSS 9.8)
• CVE-2023-50878 — WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-45055 — WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-3277 — MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation (CVSS 9.8)
• CVE-2023-3202 — MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update (CVSS 4.3)
• CVE-2023-3199 — MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update (CVSS 4.3)
• CVE-2023-3209 — MStore API < 3.9.7 - Settings Update via CSRF (CVSS 3.5)
• CVE-2023-3131 — MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update (CVSS 4.3)
• CVE-2023-3077 — MStore API < 3.9.8 - Unauthenticated Blind SQLi (CVSS 9.8)