inspireui

8 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-13447 Public exploit

  MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

  The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which d…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Sep 5, 2026
• Critical 9.8
  CVE-2024-6328

  MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass

  The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_log…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Jul 12, 2024
• Critical 9.8
  CVE-2023-3277 Scanner template

  MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

  The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as an…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Nov 3, 2023
• Critical 9.8
  CVE-2023-3197 Scanner template

  MStore API <= 4.0.1 - Unauthenticated SQL Injection

  The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the exis…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Jun 24, 2023
• Critical 9.8
  CVE-2020-36713

  MStore API <= 2.1.5 - Authentication Bypass

  The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'update_user_profile' routes. This makes it possible for unauthenticated attackers to …

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Jun 7, 2023
• Critical 9.8
  CVE-2023-2732 Public exploit Scanner template EPSS 67%

  MStore API <= 3.9.2 - Authentication Bypass

  The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  May 25, 2023
• Critical 9.8
  CVE-2023-2733

  MStore API <= 3.9.0 - Authentication Bypass

  The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.0. This is due to insufficient verification on the user being supplied during the coupon redemption REST API request through the plugin. This make…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  May 25, 2023
• Critical 9.8
  CVE-2023-2734 Scanner template

  MStore API <= 3.9.1 - Authentication Bypass

  The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This …

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  May 25, 2023