Inspireui vulnerabilities
25 CVEs and advisories name Inspireui as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-13447MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
- CVE-2026-3568MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update
- CVE-2025-4683MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
- CVE-2025-3438MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation
- CVE-2024-12042MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
- CVE-2024-11179MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
- CVE-2024-8242MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
- CVE-2024-8269MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
- CVE-2024-7628MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
- CVE-2024-6328MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
- CVE-2023-50878WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45055WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection
- CVE-2023-3277MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
- CVE-2023-3202MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
- CVE-2023-3199MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- CVE-2023-3197MStore API <= 4.0.1 - Unauthenticated SQL Injection
- CVE-2022-47614WordPress MStore API Plugin <= 3.9.7 is vulnerable to SQL Injection
- CVE-2023-3201MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- CVE-2023-3198MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
- CVE-2023-3200MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
- CVE-2023-3203MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update
- CVE-2020-36713MStore API <= 2.1.5 - Authentication Bypass
- CVE-2023-2732MStore API <= 3.9.2 - Authentication Bypass
- CVE-2023-2733MStore API <= 3.9.0 - Authentication Bypass
- CVE-2023-2734MStore API <= 3.9.1 - Authentication Bypass