FluxBuilder vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.4%	CVE-2026-27543MStore API (WordPress plugin) · Incorrect Privilege Assignment High8.1EPSS 0.4%2026-08-13CVE Database V5CVE-2026-27543 Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. EPSS 0.4%Vulnerability FluxBuilder CWE-266 #ghsa-cvhf-m4qh-hf7x	CVE Database V5	2026-08-13
Medium	6.5	EPSS 0.3%	CVE-2026-57375MStore API (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57375 Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4. EPSS 0.3%Vulnerability FluxBuilder CWE-862	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.3%	CVE-2026-54817MStore API (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Medium6.5EPSS 0.3%2026-06-17CVE Database V5CVE-2026-54817 CVE-2026-54817 is an authentication bypass vulnerability in the FluxBuilder MStore API affecting versions up to and including 4.18.4. It allows attackers to exploit password recovery functionality via an alternate path or channel, potentially leading to unauthorized actions. The vulnerability is rated medium severity with a CVSS score of 6.5. No official patch or remediation guidance is currently available from the vendor. EPSS 0.3%Vulnerability FluxBuilder CWE-288	CVE Database V5	2026-06-17
Critical	9.8	EPSS 0.8%	CVE-2024-54295ListApp Mobile Manager (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.8%2024-12-13CVE Database V5CVE-2024-54295 Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mobile-manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through <= 1.7.7. EPSS 0.8%Vulnerability FluxBuilder	CVE Database V5	2024-12-13

Page 1 of 1