WPMobile.App – Android and iOS App Builder

Güvenlik açıkları

• CVE-2026-94541kimlik doğrulamasız≤ 11.82

  WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter

  Kritik 9.8

• CVE-2026-61984kimlik doğrulamasız≤ 11.77

  WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2025-62074kimlik doğrulamasız · tıklama gerekir≤ 11.71

  WordPress WPMobile.App plugin <= 11.71 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-47349kimlik doğrulamasız · tıklama gerekir≤ 11.50

  WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-96342kimlik doğrulamasız≤ 11.83

  WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability

  Orta 6.9

• CVE-2024-12420kimlik doğrulamasız≤ 11.52

  WPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode Execution

  Orta 6.5

• CVE-2024-13888kimlik doğrulamasız≤ 11.56

  WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter

  Orta 6.1

• CVE-2024-35694kimlik doğrulamasız · tıklama gerekir≤ 11.41

  WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2026-103421kimlik doğrulamasız≤ 11.84

  WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment

  Orta 5.4

• CVE-2023-22702katılımcı+≤ 11.13

  WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2023-28932yönetici≤ 11.20

  WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2023-26010yönetici≤ 11.18

  WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2024-43933kimlik doğrulamasız · tıklama gerekir≤ 11.48

  WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability

  Orta 4.3