Medium
CVE-2026-97219
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 39
Reset filters
Critical
CVE-2026-13447
MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
Medium
CVE-2026-18234
MStore API – Create Native Android & iOS Apps On The Cloud < 4.21.1 - Missing Authorization
Medium
CVE-2026-18233
MStore API – Create Native Android & iOS Apps On The Cloud < 4.21.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Completion
Critical
CVE-2026-27543
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.20.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-16038
MStore API <= 4.20.0 - Missing Authorization
Medium
CVE-2026-16041
MStore API <= 4.20.0 - Missing Authorization
Medium
CVE-2026-16039
MStore API <= 4.20.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order and Customer PII Disclosure
Medium
CVE-2026-57375
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.18.4 - Missing Authorization
Medium
CVE-2026-54817
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.18.4 - Missing Authorization
Medium
CVE-2026-3568
MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update
Medium
CVE-2025-4683
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
Medium
CVE-2025-3438
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation
Medium
CVE-2024-12042
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Medium
CVE-2024-11179
MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-8242
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
High
CVE-2024-8269
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
High
CVE-2024-7628
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
Critical
CVE-2024-6328
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
Medium
CVE-2023-50878
MStore API <= 4.10.1 - Cross-Site Request Forgery
High
CVE-2023-45055
MStore API <= 4.0.6 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
Critical
CVE-2023-3077
MStore API <= 3.9.7 - Unauthenticated SQL Injection
Critical
CVE-2023-3076
MStore API <= 3.9.8 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.