agentprime: mstore-apiEvery new CVE for mstore-api.https://agentprime.io/CVE-2026-97219: MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameterhttps://agentprime.io/advisories/CVE-2026-97219/https://agentprime.io/advisories/CVE-2026-97219/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:56:54 GMTCVECVE-2026-18234: MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallethttps://agentprime.io/advisories/CVE-2026-18234/https://agentprime.io/advisories/CVE-2026-18234/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 06:00:20 GMTCVECVE-2026-18233: MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completionhttps://agentprime.io/advisories/CVE-2026-18233/https://agentprime.io/advisories/CVE-2026-18233/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 06:00:19 GMTCVECVE-2026-16041: MStore API < 4.21.0 - Unauthenticated Product Review Creationhttps://agentprime.io/advisories/CVE-2026-16041/https://agentprime.io/advisories/CVE-2026-16041/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 06:00:13 GMTCVECVE-2026-16039: MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDORhttps://agentprime.io/advisories/CVE-2026-16039/https://agentprime.io/advisories/CVE-2026-16039/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 06:00:13 GMTCVECVE-2026-16038: MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gatewayshttps://agentprime.io/advisories/CVE-2026-16038/https://agentprime.io/advisories/CVE-2026-16038/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 06:00:13 GMTCVEcriticalCVE-2026-16030: MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authenticationhttps://agentprime.io/advisories/CVE-2026-16030/https://agentprime.io/advisories/CVE-2026-16030/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 06:00:13 GMTCVECVE-2021-47933: WordPress MStore API 2.0.6 Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2021-47933/https://agentprime.io/advisories/CVE-2021-47933/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 May 2026 12:43:53 GMTCVEcriticalCVE-2023-3131: MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Updatehttps://agentprime.io/advisories/CVE-2023-3131/https://agentprime.io/advisories/CVE-2023-3131/Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jul 2023 12:41:17 GMTCVECVE-2023-3209: MStore API < 3.9.7 - Settings Update via CSRFhttps://agentprime.io/advisories/CVE-2023-3209/https://agentprime.io/advisories/CVE-2023-3209/Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jul 2023 12:41:04 GMTCVECVE-2023-3077: MStore API < 3.9.8 - Unauthenticated Blind SQLihttps://agentprime.io/advisories/CVE-2023-3077/https://agentprime.io/advisories/CVE-2023-3077/Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jul 2023 12:40:19 GMTCVECVE-2023-3076: MStore API < 3.9.9 - Unauthenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-3076/https://agentprime.io/advisories/CVE-2023-3076/Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jul 2023 12:40:16 GMTCVECVE-2021-24148: MStore API < 3.2.0 - Authentication Bypass With Sign In With Applehttps://agentprime.io/advisories/CVE-2021-24148/https://agentprime.io/advisories/CVE-2021-24148/Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Mar 2021 14:57:50 GMTCVE