CVE Intelligence

FluxBuilder vulnerabilities

🔔 Create alert RSS

Published CVEs affecting FluxBuilder products: 2 record(s), with severity, exploitation and fixes.

MStore API 2

Exploited only (KEV) →

CVE-2026-57375 Medium · 6.5 CWE-862 Jul 13, 2026
WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.
CVE-2026-54817 Medium · 6.5 CWE-288 Jun 17, 2026
WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4.