{"uuid": "ee347736-beb7-4d7e-bffd-3ecdb4c35442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16030", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053405708747434", "content": "MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln", "creation_timestamp": "2026-08-07T09:00:27.504055Z"}