CVE-2026-27543

HighCVSS 8.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Unauthenticated privilege escalation in MStore API versions up to 4.20.0. An attacker can elevate privileges without authentication.

Risk of admin account takeover, full site control, and access to sensitive data.

Update the MStore API plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.