CVE-2026-27543: WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
Published Aug 13, 2026
·Updated
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
Affected Software
1 affected component
WordPress MStore API<=4.20.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress MStore API pluginto a version that resolves this vulnerability.Fixed in 4.21.0
Event History
Aug 13, 2026
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-27543?
CVE-2026-27543 has a severity score of 8.1, categorized as high.
2
What is the risk associated with CVE-2026-27543?
CVE-2026-27543 is rated as a risk level of 75.
3
How do I fix CVE-2026-27543?
To fix CVE-2026-27543, update the MStore API plugin to the latest version above 4.20.0.
4
What type of vulnerability is CVE-2026-27543?
CVE-2026-27543 is classified as an unauthenticated privilege escalation vulnerability.
5
Which versions of the MStore API plugin are affected by CVE-2026-27543?
CVE-2026-27543 affects all versions of the MStore API plugin up to and including version 4.20.0.