CVE-2025-4683
Published May 27, 2025The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cre…
Vendor archive
inspireui CVEs
Beta · best-effort28 CVEs tagged to vendor inspireui — 10 Critical, 4 High, 13 Medium, 1 Low, 0 Unrated.
CVE-2025-3438
Published May 2, 2025The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 4.17.4. Thi…
CVE-2024-12042
Published Dec 13, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in al…
CVE-2024-11179
Published Nov 20, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to SQL Injection via the 'status_type' parameter in all versions up to, and inclu…
CVE-2024-8269
Published Sep 13, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. T…
CVE-2024-8242
Published Sep 13, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_…
CVE-2024-7628
Published Aug 15, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.15.2. This is due to…
CVE-2024-6328
Published Jul 12, 2024The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is du…
CVE-2023-50878
Published Dec 29, 2023Cross-Site Request Forgery (CSRF) vulnerability in InspireUI MStore API.This issue affects MStore API: from n/a through 4.10.1.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-45055
Published Nov 6, 2023Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InspireUI MStore API allows SQL Injection.This issue affects MStore API: from…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3277
Published Nov 3, 2023The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation o…
CVE-2023-3202
Published Jul 12, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_firebase_server_key function. This makes it po…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3199
Published Jul 12, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_title function. This makes it pos…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3209
Published Jul 10, 2023The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
CVE-2023-3131
Published Jul 10, 2023The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both.
CVE-2023-3077
Published Jul 10, 2023The MStore API WordPress plugin before 3.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a Blind SQL injection exploitable by unauthent…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3076
Published Jul 10, 2023The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is onl…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3197
Published Jun 24, 2023The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escapin…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-47614
Published Jun 23, 2023Unauth. SQL Injection (SQLi) vulnerability in InspireUI MStore API plugin <= 3.9.7 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3203
Published Jun 14, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3201
Published Jun 14, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possib…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3200
Published Jun 14, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it poss…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-3198
Published Jun 14, 2023The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it p…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-36713
Published Jun 7, 2023The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'updat…
CVE-2023-2734
Published May 25, 2023The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supp…
- evidence mentions
- 2
- Buzz score
- 16.0
Showing 1-25 of 28 CVEsPage 1 of 2