Advisories · Technology

inspireui MStore API – Create Native Android & iOS Apps On The Cloud.

Every CVE that names inspireui MStore API – Create Native Android & iOS Apps On The Cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13447 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 5 Sept 2026
CVE-2026-3568 CVE record

CVSS 4.3 Medium

MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Broken access control
Not analysed yet 9 Apr 2026
CVE-2025-4683 CVE record

CVSS 4.3 Medium

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Broken access control
Not analysed yet 27 May 2025
CVE-2025-3438 CVE record

CVSS 6.5 Medium

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Privilege escalation
Not analysed yet 2 May 2025
CVE-2024-12042 CVE record

CVSS 5.4 Medium

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Unrestricted file upload
Not analysed yet 13 Dec 2024
CVE-2024-11179 CVE record

CVSS 6.5 Medium

MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- SQL injection
Not analysed yet 20 Nov 2024
CVE-2024-8242 CVE record

CVSS 4.3 Medium

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Unrestricted file upload
Not analysed yet 13 Sept 2024
CVE-2024-8269 CVE record

CVSS 7.3 High

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Broken access control
Not analysed yet 13 Sept 2024
CVE-2024-7628 CVE record

CVSS 8.1 High

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 15 Aug 2024
CVE-2024-6328 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 12 Jul 2024
CVE-2023-3277 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 3 Nov 2023
CVE-2023-3202 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 12 Jul 2023
CVE-2023-3199 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 12 Jul 2023
CVE-2023-3197 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 4.0.1 - Unauthenticated SQL Injection
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- SQL injection
Not analysed yet 24 Jun 2023
CVE-2023-3201 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jun 2023
CVE-2023-3198 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jun 2023
CVE-2023-3200 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jun 2023
CVE-2023-3203 CVE record

CVSS 4.3 Medium

MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jun 2023
CVE-2020-36713 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 2.1.5 - Authentication Bypass
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 7 Jun 2023
CVE-2023-2732 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

MStore API <= 3.9.2 - Authentication Bypass
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 25 May 2023
CVE-2023-2733 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 3.9.0 - Authentication Bypass
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 25 May 2023
CVE-2023-2734 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MStore API <= 3.9.1 - Authentication Bypass
- inspireui MStore API – Create Native Android & iOS Apps On The Cloud
- Authentication bypass
Not analysed yet 25 May 2023