WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in MStore API – Create Native Android & iOS Apps On The Cloud

Take your WordPress store mobile with MStore API! This plugin bridges the gap between your WordPress website and the powerful FluxBuilder app builder.

40Reported vulnerabilities
9.8Highest CVSS score
4.21.1Latest version
3,000+Active installs

What to do now

Update MStore API – Create Native Android & iOS Apps On The Cloud to 4.21.1 or later. 39 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 5, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-2732 Critical 9.8 67.5% 3.9.2 and earlier 3.9.3 May 25, 2023
CVE-2023-3077 Critical 9.8 5.5% Before 3.9.8 3.9.8 July 10, 2023
CVE-2023-3076 Critical 9.8 2.2% Before 3.9.9 3.9.9 July 10, 2023
CVE-2020-36713 Critical 9.8 1.6% 2.1.5 and earlier 2.1.6 June 7, 2023
CVE-2023-3197 Critical 9.8 3.9% 4.0.1 and earlier 4.0.2 June 24, 2023
CVE-2023-2734 Critical 9.8 3.8% 3.9.1 and earlier 3.9.2 May 25, 2023
CVE-2021-24148 Critical 9.8 3.4% Before 3.2.0 3.2.0 March 18, 2021
CVE-2023-3277 Critical 9.8 2.9% 4.10.7 and earlier 4.10.8 November 3, 2023
CVE-2023-2733 Critical 9.8 1.2% 3.9.0 and earlier 3.9.1 May 25, 2023
CVE-2026-13447 Critical 9.8 0.4% 0 to 4.20.0 (inclusive) 4.21.1 September 5, 2026
CVE-2026-27543 Critical 9.8 0.3% 4.20.0 and earlier 4.21.0 August 11, 2026
CVE-2024-6328 Critical 9.8 0.7% Before 4.15.0 4.15.0 July 12, 2024
CVE-2022-47614 Critical 9.8 0.6% 3.9.7 and earlier 3.9.8 June 19, 2023
WF-04b7a2ba-e299-4781-8ee6-644938bf9629 Critical 9.8 — Before 3.4.5 3.4.5 October 5, 2021
CVE-2021-47933 Critical 9.3 0.6% — — May 10, 2026
CVE-2024-8242 High 8.8 0.8% Before 4.15.4 4.15.4 September 13, 2024
CVE-2023-45055 High 8.8 0.5% 4.0.6 and earlier 4.0.7 October 3, 2023
CVE-2023-3131 Medium 4.3 0.6% Before 3.9.7 3.9.7 July 10, 2023
CVE-2024-7628 High 8.1 0.7% Before 4.15.3 4.15.3 August 15, 2024
CVE-2023-3209 Low 3.5 0.3% Before 3.9.7 3.9.7 July 10, 2023
CVE-2025-3438 High 7.3 0.3% Before 4.17.5 4.17.5 May 2, 2025
CVE-2024-11179 Medium 6.5 0.5% Before 4.15.8 4.15.8 November 20, 2024
CVE-2024-8269 Medium 6.5 0.4% Before 4.15.4 4.15.4 September 13, 2024
CVE-2026-18234 Medium 6.3 0.2% Before 4.21.1 4.21.1 August 27, 2026
CVE-2024-12042 Medium 5.4 0.3% Before 4.16.5 4.16.5 December 13, 2024
CVE-2026-16041 Medium 5.3 0.2% 4.20.0 and earlier 4.21.0 August 3, 2026
CVE-2026-16038 Medium 5.3 0.2% 4.20.0 and earlier 4.21.0 August 3, 2026
CVE-2026-57375 Medium 5.3 0.3% 4.18.4 and earlier 4.19.0 July 7, 2026
CVE-2026-54817 Medium 5.3 0.3% 4.18.4 and earlier 4.19.0 June 17, 2026
CVE-2026-18233 Medium 4.3 0.2% Before 4.21.1 4.21.1 August 27, 2026
CVE-2026-16039 Medium 4.3 0.2% 4.20.0 and earlier 4.21.0 August 3, 2026
CVE-2026-3568 Medium 4.3 0.2% 0 to 4.18.3 (inclusive) 4.18.4 April 9, 2026
CVE-2025-4683 Medium 4.3 0.3% Before 4.17.6 4.17.6 May 27, 2025
CVE-2023-50878 Medium 4.3 0.2% 4.10.1 and earlier 4.10.2 December 26, 2023
CVE-2023-3202 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 July 12, 2023
CVE-2023-3199 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 July 12, 2023
CVE-2023-3203 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 June 14, 2023
CVE-2023-3201 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 June 14, 2023
CVE-2023-3200 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 June 14, 2023
CVE-2023-3198 Medium 4.3 0.3% 3.9.6 and earlier 3.9.7 June 14, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.