Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-23
WPMobile.App - Security Vulnerability (CVE-2026-112359)
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.
PLUGIN
WPMobile.App
CVE-2026-112359
Risk Score
Threat Entry
Updated 2026-10-06
WPMobile.App - Security Vulnerability (CVE-2026-103421)
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' parameter in all versions up to, and including, 11.84 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the app's content mode to be configured as 'webview' (i.e., the 'speed' option is not set to '1'), which is a supported and…
PLUGIN
WPMobile.App
CVE-2026-103421
Risk Score
Threat Entry
Updated 2026-10-02
WPMobile.App - Security Vulnerability (CVE-2026-94541)
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate password-reset URLs for arbitrary users, including administrators, mirrored into the push queue by the mail-to-push feature, and use those URLs to take over the targeted accounts. This exploit chain requires the plugin's mail-to-push feature (wpmobile_auto_mail=1) to be enabled, as…
PLUGIN
WPMobile.App
CVE-2026-94541
Risk Score
Threat Entry
Updated 2026-06-17
Wpmobile App - Open Redirect (CVE-2024-13888)
The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
PLUGIN
Wpmobile App
CVE-2024-13888
Risk Score
Threat Entry
Updated 2026-06-17
The WPMobile.App - Security Vulnerability (CVE-2024-12420)
The The WPMobile.App — Android and iOS Mobile Application plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.52. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
PLUGIN
The WPMobile.App
CVE-2024-12420
Risk Score
Threat Entry
Updated 2026-06-17
Wpmobile App - Cross-Site Scripting (XSS) (CVE-2024-35694)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through
PLUGIN
Wpmobile App
CVE-2024-35694
Risk Score
Threat Entry
Updated 2026-06-17
Wpmobile App - Cross-Site Scripting (XSS) (CVE-2023-28932)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin
PLUGIN
Wpmobile App
CVE-2023-28932
Risk Score
Threat Entry
Updated 2026-06-17
Wpmobile App - Cross-Site Scripting (XSS) (CVE-2023-26010)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App plugin
PLUGIN
Wpmobile App
CVE-2023-26010
Risk Score
Threat Entry
Updated 2026-06-17
Wpmobile App - Cross-Site Scripting (XSS) (CVE-2023-22702)
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin
PLUGIN
Wpmobile App
CVE-2023-22702
Risk Score