CVE-2026-27543CWE-266

CVE-2026-27543

High · published August 13, 2026

CVSS v3.1

8.1

EPSS

0%

Percentile

30.1

In the wild

Unconfirmed

What it is

Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00373 · 30.1th percentile
Weakness: CWE-266 · Incorrect Privilege Assignment
Published: 2026-08-13T18:16Z

References (1)

https://patchstack.com/database/wordpress/plugin/mstore-api/vulnerability/wordpress-mstore-api-plugin-4-20-0-privilege-escalation-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

13 AUG 13:36Z
WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
cvelistv5