FluxBuilder MStore API vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting FluxBuilder MStore API: 3 record(s), with affected versions and fixes.
CVE-2026-27543
High · 8.1
CWE-266 Aug 13, 2026
WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
CVE-2026-57375
Medium · 6.5
CWE-862 Jul 13, 2026
WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.
CVE-2026-54817
Medium · 6.5
CWE-288 Jun 17, 2026
WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation.
This issue affects MStore API: from n/a through 4.18.4.