Mstore Api
Approved changes feed: RSS · Atom
cpe:2.3:a:fluxbuilder:mstore_api:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fluxbuilder (52048667-cd6d-5da5-926b-cd16682bce97) |
|---|---|
| Product | Mstore Api (8b60309d-9cc0-5a89-806f-0badf54108de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57375 |
vulnerable | 2026-07-29 01:00:29.687212 |
WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.
Published: 2026-07-13T08:41:23.762Z
Updated: 2026-07-13T13:47:23.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54817 |
vulnerable | 2026-07-29 01:00:28.006096 |
WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability
MEDIUM (6.5)
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation.
This issue affects MStore API: from n/a through 4.18.4.
Published: 2026-06-17T13:36:04.122Z
Updated: 2026-06-17T14:15:18.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8269 |
vulnerable | 2026-06-08 07:00:23.455409 |
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
HIGH (7.3)
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. This is due to the plugin not checking that user registration is enabled prior to creating a user account through the register() function. This makes it possible for unauthenticated attackers to create user accounts on sites, even when user registration is disabled and plugin functionality is not activated.
Published: 2024-09-13T15:10:38.839Z
Updated: 2026-04-08T16:54:54.958Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6328 |
vulnerable | 2026-06-08 06:58:18.594309 |
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
CRITICAL (9.8)
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_login' and 'firebase_sms_login_v2' functions. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email address or phone number. Additionally, if a new email address is supplied, a new user account is created with the default role, even if registration is disabled.
Published: 2024-07-12T10:59:56.085Z
Updated: 2026-04-08T16:37:30.124Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.