Unknown MStore API

• CVE-2026-97219 Medium 4.3 MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter 0.2%
• CVE-2026-18234 Medium 6.5 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet 0.3%
• CVE-2026-18233 Medium 6.5 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion 0.3%
• CVE-2026-16041 High 7.5 MStore API < 4.21.0 - Unauthenticated Product Review Creation 0.4%
• CVE-2026-16039 Medium 6.5 MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR 0.3%
• CVE-2026-16038 Critical 9.1 MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways 0.4%
• CVE-2026-16030 High 8.1 MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication 0.4%
• CVE-2023-3131 Unrated MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update 0.6%
• CVE-2023-3209 Unrated MStore API < 3.9.7 - Settings Update via CSRF 0.3%
• CVE-2023-3077 Unrated MStore API < 3.9.8 - Unauthenticated Blind SQLi 5.5%
• CVE-2023-3076 Unrated MStore API < 3.9.9 - Unauthenticated Privilege Escalation 2.2%
• CVE-2021-24148 Unrated MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple 3.4%