CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

210 matches found

Patchstack•added 2025/11/24 6:51 a.m.•6 views

WordPress Mstore Mobile Multivendor plugin <= 9.0.1 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Mstore Mobile App versions = 9.0.1...

9.8CVSS7AI score0.00288EPSS

Exploits0References1Affected Software1

EUVD•added 2025/11/21 3:31 p.m.•5 views

EUVD-2025-198490

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address...

9.8CVSS6.5AI score0.00288EPSS

Exploits0References2

CVE•added 2025/11/21 1:41 p.m.•23 views

CVE-2025-11127

The connected sources detail an unauthenticated privilege-escalation in WordPress plugins: Mstoreapp Mobile App (<= 2.08) and Mstoreapp Mobile Multivendor (

9.8CVSS6.6AI score0.00288EPSS

Exploits0References1

Vulnrichment•added 2025/11/21 1:41 p.m.•5 views

CVE-2025-11127 Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation

6.6AI score0.00288EPSS

Exploits0References1

Cvelist•added 2025/11/21 1:41 p.m.•15 views

CVE-2025-11127 Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation

0.00288EPSS

Exploits0References1

CNNVD•added 2025/11/21 12:0 a.m.•4 views

WordPress plugin Mstoreapp Mobile App和Mstoreapp Mobile Multivendor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

9.8CVSS6.6AI score0.00288EPSS

Exploits0References2