GCVE - cpe:2.3:a:apppresser:apppresser:-:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apppresser:apppresser:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

Vendor	Apppresser (`c388428d-555f-5b61-9765-7091fbcf267d`)
Product	Apppresser (`7b1c3c85-6d37-51a1-bb8e-851a8c54e6f5`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/apppresser/apppresser`	purl2cpe	2026-06-01 10:14:39.794391

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-4611`	vulnerable	2026-06-08 06:50:18.274315	AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass HIGH (8.1) The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they previously used the login via the plugin API. This can only be exploited if the 'openssl' php extension is not loaded on the server. Published: 2024-05-29T04:30:14.177Z Updated: 2026-04-08T17:25:08.103Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/d1498fdf-9d5e-4277-92be-469d6646864b?source=cve https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_User.php?rev=2789173#L40 https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L167 https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L133 https://plugins.trac.wordpress.org/changeset/3093975/apppresser	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32776`	vulnerable	2026-06-08 06:37:23.961114	WordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0. Published: 2024-05-10T08:43:20.348Z Updated: 2026-04-28T16:09:40.139Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/apppresser/wordpress-apppresser-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11024`	vulnerable	2026-06-08 06:23:48.453383	AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset CRITICAL (9.8) The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possible for unauthenticated attackers, with knowledge of a user's email address, to reset the user's password and gain access to their account. Published: 2024-11-26T11:04:29.624Z Updated: 2026-04-08T16:49:14.102Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/43cb0399-4add-43d5-863c-30e11803bd90?source=cve https://plugins.trac.wordpress.org/changeset/3192531/apppresser	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.