CVE-2026-16038 | MStore API Plugin up to 4.20.x on WordPress authorization

August 7, 2026 Yanac

A vulnerability was found in MStore API Plugin up to 4.20.x on WordPress. It has been declared as problematic. This affects an unknown part. Executing a manipulation can lead to missing authorization.

This vulnerability appears as CVE-2026-16038. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More