# cve.now: Inspireui

The newest entries naming Inspireui as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-13447](https://cve.now/CVE-2026-13447.md): MStore API \<= 4.20.0 - Unauthenticated Authentication Bypass via 'id\_token' Parameter JWT Forgery (CVSS 9.8)
- [CVE-2026-3568](https://cve.now/CVE-2026-3568.md): MStore API \<= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update (CVSS 4.3)
- [CVE-2025-4683](https://cve.now/CVE-2025-4683.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation (CVSS 4.3)
- [CVE-2025-3438](https://cve.now/CVE-2025-3438.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.17.4 - Unauthenticated Limited Privilege Escalation (CVSS 6.5)
- [CVE-2024-12042](https://cve.now/CVE-2024-12042.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting) (CVSS 5.4)
- [CVE-2024-11179](https://cve.now/CVE-2024-11179.md): MStore API \<= 4.15.7 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
- [CVE-2024-8242](https://cve.now/CVE-2024-8242.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload (CVSS 4.3)
- [CVE-2024-8269](https://cve.now/CVE-2024-8269.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.15.3 - Unauthorized User Registration (CVSS 7.3)
- [CVE-2024-7628](https://cve.now/CVE-2024-7628.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.15.2 - Authentication Bypass to Account Takeover (CVSS 8.1)
- [CVE-2024-6328](https://cve.now/CVE-2024-6328.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.14.7 - Authentication Bypass (CVSS 9.8)
- [CVE-2023-50878](https://cve.now/CVE-2023-50878.md): WordPress MStore API Plugin \<= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-45055](https://cve.now/CVE-2023-45055.md): WordPress MStore API Plugin \<= 4.0.6 is vulnerable to SQL Injection (CVSS 8.5)
- [CVE-2023-3277](https://cve.now/CVE-2023-3277.md): MStore API \<= 4.10.7 - Unauthorized Account Access and Privilege Escalation (CVSS 9.8)
- [CVE-2023-3202](https://cve.now/CVE-2023-3202.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update (CVSS 4.3)
- [CVE-2023-3199](https://cve.now/CVE-2023-3199.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Order Title Update (CVSS 4.3)
- [CVE-2023-3197](https://cve.now/CVE-2023-3197.md): MStore API \<= 4.0.1 - Unauthenticated SQL Injection (CVSS 9.8)
- [CVE-2022-47614](https://cve.now/CVE-2022-47614.md): WordPress MStore API Plugin \<= 3.9.7 is vulnerable to SQL Injection (CVSS 7.5)
- [CVE-2023-3201](https://cve.now/CVE-2023-3201.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Order Title Update (CVSS 4.3)
- [CVE-2023-3198](https://cve.now/CVE-2023-3198.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Order Status Update (CVSS 4.3)
- [CVE-2023-3200](https://cve.now/CVE-2023-3200.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Order Message Update (CVSS 4.3)
- [CVE-2023-3203](https://cve.now/CVE-2023-3203.md): MStore API \<= 3.9.6 - Cross-Site Request Forgery to Product Limit Update (CVSS 4.3)
- [CVE-2020-36713](https://cve.now/CVE-2020-36713.md): MStore API \<= 2.1.5 - Authentication Bypass (CVSS 9.8)
- [CVE-2023-2732](https://cve.now/CVE-2023-2732.md): MStore API \<= 3.9.2 - Authentication Bypass (CVSS 9.8)
- [CVE-2023-2733](https://cve.now/CVE-2023-2733.md): MStore API \<= 3.9.0 - Authentication Bypass (CVSS 9.8)
- [CVE-2023-2734](https://cve.now/CVE-2023-2734.md): MStore API \<= 3.9.1 - Authentication Bypass (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/inspireui
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.