Read the docs

mstore

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

mstore records in CISA KEV

No mstore vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2021-22546 CVE-2021-47933 · GHSA-5c3p-jrjh-vwpm

WordPress MStore API 2.0.6 Arbitrary File Upload

Priority HIGH 81

WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the REST API endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00587 Published 2026-05-10 No fix listed CWE-306
Open these records in search →