WPMobile.App – Android and iOS App Builder

Уязвимости

• CVE-2026-94541без авторизации≤ 11.82

  WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter

  Критич. 9.8

• CVE-2026-61984без авторизации≤ 11.77

  WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2025-62074без авторизации · нужен клик≤ 11.71

  WordPress WPMobile.App plugin <= 11.71 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-47349без авторизации · нужен клик≤ 11.50

  WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-96342без авторизации≤ 11.83

  WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability

  Средний 6.9

• CVE-2024-12420без авторизации≤ 11.52

  WPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode Execution

  Средний 6.5

• CVE-2024-13888без авторизации≤ 11.56

  WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter

  Средний 6.1

• CVE-2024-35694без авторизации · нужен клик≤ 11.41

  WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2026-103421без авторизации≤ 11.84

  WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment

  Средний 5.4

• CVE-2023-22702участник+≤ 11.13

  WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2023-28932админ≤ 11.20

  WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2023-26010админ≤ 11.18

  WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2024-43933без авторизации · нужен клик≤ 11.48

  WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability

  Средний 4.3