Log in Start free

InspireUI

Products

ProductCVEsExploitedLatest
MStore API – Create Native Android & iOS Apps On The Cloud22–Sep 5, 2026
MStore API3–Dec 29, 2023

Exploited and recent CVEs

  • CVE-2026-13447 Critical 9.8 MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery 0.7%
  • CVE-2026-3568 Medium 4.3 MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update 0.2%
  • CVE-2025-4683 Medium 4.3 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation 0.3%
  • CVE-2025-3438 Medium 6.5 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation 0.3%
  • CVE-2024-12042 Medium 5.4 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting) 0.3%
  • CVE-2024-11179 Medium 6.5 MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection 0.5%
  • CVE-2024-8242 Medium 4.3 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload 0.8%
  • CVE-2024-8269 High 7.3 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration 0.4%
  • CVE-2024-7628 High 8.1 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover 0.7%
  • CVE-2024-6328 Critical 9.8 MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass 0.7%
  • CVE-2023-50878 Medium 5.4 WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-45055 High 8.5 WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection 0.7%
  • CVE-2023-3277 Critical 9.8 MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation 3.4%
  • CVE-2023-3202 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update 0.3%
  • CVE-2023-3199 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update 0.3%
  • CVE-2023-3197 Critical 9.8 MStore API <= 4.0.1 - Unauthenticated SQL Injection 3.9%
  • CVE-2022-47614 High 7.5 WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection 0.6%
  • CVE-2023-3201 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update 0.3%
  • CVE-2023-3198 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update 0.3%
  • CVE-2023-3200 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update 0.3%
  • CVE-2023-3203 Medium 4.3 MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update 0.3%
  • CVE-2020-36713 Critical 9.8 MStore API <= 2.1.5 - Authentication Bypass 1.6%
  • CVE-2023-2732 Critical 9.8 MStore API <= 3.9.2 - Authentication Bypass 67.3%
  • CVE-2023-2733 Critical 9.8 MStore API <= 3.9.0 - Authentication Bypass 1.2%
  • CVE-2023-2734 Critical 9.8 MStore API <= 3.9.1 - Authentication Bypass 3.8%