FluxBuilder

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

FluxBuilder records in CISA KEV

No FluxBuilder vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-36383 CVE-2024-54295 · GHSA-4ffq-5gpq-hvrg

WordPress ListApp Mobile Manager plugin <= 1.7.7 - Account Takeover vulnerability

MEDIUM 50

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mobile-manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00751 Published 2024-12-13 No fix listed CWE-288

TI-2026-21937 CVE-2026-27543 · GHSA-cvhf-m4qh-hf7x

WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability

LOW 37

Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00373 Published 2026-08-13 No fix listed CWE-266

TI-2026-41312 CVE-2026-57375 · GHSA-gqww-cwh5-5mwj

WordPress MStore API plugin <= 4.18.4 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2026-07-13 No fix listed CWE-862

TI-2026-39620 CVE-2026-54817 · GHSA-vfmj-48r5-54j4

WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability

LOW 34

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00253 Published 2026-06-17 No fix listed CWE-288

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0