Unknown MStore API

3 known vulnerabilities in Unknown MStore API, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-97219 CVSS 4.3 medium The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing any authenticated…
  • CVE-2026-18234 CVSS 6.5 medium The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the…
  • CVE-2026-18233 CVSS 6.5 medium The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the…