Skip to content
PluginCanary

MStore API

MStore API - Create Native Android & iOS Apps On The Cloud
by FluxBuilder · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Sep 2026, 34 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for MStore API
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is MStore API still maintained?
Yes. Last release 29 Sep 2026, 34 releases in the last 24 months. 29 Sep 2026 · wordpress.org
Who owns MStore API, and has it changed hands?
No change recorded. Main committer inspireui since Sep 2019. 3 Nov 2026 · SVN log
Was MStore API removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is MStore API safe?
39 known vulnerabilities, all fixed (latest in 4.22.1). Not on the exploited list. 30 Sep 2026 · Wordfence Intelligence
Is the latest MStore API update safe to install?
No ownership change before 4.22.1. No one-star spike after it. 29 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master18 Sep 2019 to 18 Sep 2019, 1 commits
inspireui23 Sep 2019 to 29 Sep 2026, 490 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
36 days ago
Releases, 24 months
34
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for MStore API
Q1 202415
Q2 202412
Q3 20245
Q4 202414
Q1 20254
Q2 20256
Q3 20253
Q4 20252
Q1 20261
Q2 20260
Q3 20265
Q4 20260

Last release 29 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.7.

Rating distribution
5 star14
4 star0
3 star0
2 star0
1 star7

Security record

15 vulnerabilities in 24 months (39 on record), all patched (latest fixed in 4.22.1).

Show 39 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026MStore API 4.21.1 - 4.22.0 - Authenticated (Subscriber+) Payment Bypass4.34.21.1 to 4.22.04.22.1Patched before disclosure
4 Sep 2026MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery9.8<= 4.20.04.21.1Patched before disclosure
27 Aug 2026MStore API - Create Native Android & iOS Apps On The Cloud < 4.21.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Completion4.3< 4.21.14.21.1Patched before disclosure
27 Aug 2026MStore API - Create Native Android & iOS Apps On The Cloud < 4.21.1 - Missing Authorization6.3< 4.21.14.21.1Patched before disclosure
11 Aug 2026MStore API - Create Native Android & iOS Apps On The Cloud <= 4.20.0 - Unauthenticated Privilege Escalation9.8<= 4.20.04.21.0n/a
3 Aug 2026MStore API <= 4.20.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order and Customer PII Disclosure4.3<= 4.20.04.21.0n/a
3 Aug 2026MStore API <= 4.20.0 - Missing Authorization5.3<= 4.20.04.21.0n/a
3 Aug 2026MStore API <= 4.20.0 - Missing Authorization5.3<= 4.20.04.21.0n/a
7 Jul 2026MStore API - Create Native Android & iOS Apps On The Cloud <= 4.18.4 - Missing Authorization5.3<= 4.18.44.19.0n/a
17 Jun 2026MStore API - Create Native Android & iOS Apps On The Cloud <= 4.18.4 - Missing Authorization5.3<= 4.18.44.19.0n/a
8 Apr 2026MStore API <= 4.18.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Meta Update4.3<= 4.18.34.18.4Patched before disclosure
26 May 2025MStore API - Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation4.3<= 4.17.54.17.6Patched before disclosure
1 May 2025MStore API - Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalation6.5<= 4.17.44.17.5Patched before disclosure
12 Dec 2024MStore API - Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)5.4<= 4.16.44.16.5Patched before disclosure
19 Nov 2024MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection6.5<= 4.15.74.15.8Patched before disclosure
12 Sep 2024MStore API - Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload4.3<= 4.15.34.15.4Patched before disclosure
12 Sep 2024MStore API - Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration7.3<= 4.15.34.15.4Patched before disclosure
14 Aug 2024MStore API - Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover8.1<= 4.15.24.15.3Patched before disclosure
11 Jul 2024MStore API - Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass9.8<= 4.14.74.15.0Patched before disclosure
26 Dec 2023MStore API <= 4.10.1 - Cross-Site Request Forgery4.3<= 4.10.14.10.2Patched before disclosure
3 Oct 2023MStore API <= 4.0.6 - Authenticated (Subscriber+) SQL Injection8.8<= 4.0.64.0.7Patched before disclosure
23 Jun 2023MStore API <= 4.0.1 - Unauthenticated SQL Injection9.8<= 4.0.14.0.2Patched before disclosure
19 Jun 2023MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation9.8<= 4.10.74.10.8138
19 Jun 2023MStore API <= 3.9.8 - Unauthenticated Privilege Escalation9.8<= 3.9.83.9.9Patched before disclosure
19 Jun 2023MStore API <= 3.9.7 - Unauthenticated SQL Injection9.8<= 3.9.73.9.8Patched before disclosure

Changelog mentions of security fixes: 4.21.1 (security); 4.21.2 (security); 4.22.0 (security, sanitize); 4.22.1 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MStore API
4 May 2026170
11 May 2026183
18 May 20261,207
25 May 2026396
1 Jun 2026274
8 Jun 2026962
15 Jun 2026579
22 Jun 2026261
29 Jun 2026230
6 Jul 2026280
13 Jul 2026190
20 Jul 2026185
27 Jul 20261,146
3 Aug 20261,316
10 Aug 2026562
17 Aug 20261,899
24 Aug 2026426
31 Aug 2026411
7 Sep 2026286
14 Sep 2026264
21 Sep 2026469
28 Sep 20261,375
5 Oct 2026559
12 Oct 2026400
19 Oct 2026421
26 Oct 2026392
2 Nov 202683

Weekly downloads over the last 4 weeks are 41% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version4.22.1
AuthorFluxBuilder
Added23 Sep 2019
Last updated29 Sep 2026
Active installs2,000+
Requires WordPress4.4
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsflutter, app builder, app creator,  woocommerce app, mobile app builder

Questions

Is MStore API still maintained?

Yes. Last release 29 Sep 2026, 34 releases in the last 24 months.

Who owns MStore API, and has it changed hands?

No change recorded. Main committer inspireui since Sep 2019.

Was MStore API removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is MStore API safe?

39 known vulnerabilities, all fixed (latest in 4.22.1). Not on the exploited list.

Is the latest MStore API update safe to install?

No ownership change before 4.22.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue