Approved changes feed: RSS · Atom

cpe:2.3:a:amauri:wpmobile.app:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAmauri (ef0ec0a2-6ce1-5b83-acce-0dc9c23ba4b5)
ProductWpmobile.App (00e3544c-fb15-542c-ac2f-12d0aadc4f67)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35694 vulnerable 2026-06-08 06:39:42.393842 WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through <= 11.41.
Published: 2024-06-08T14:27:47.897Z
Updated: 2026-04-28T16:09:53.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13888 vulnerable 2026-06-08 06:25:38.699410 WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter
HIGH (7.2)
The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
Published: 2025-02-20T08:22:06.037Z
Updated: 2026-04-08T17:12:21.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28932 vulnerable 2026-06-08 06:02:36.651070 WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.20 versions.
Published: 2023-05-10T07:07:24.036Z
Updated: 2026-04-28T16:08:17.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26010 vulnerable 2026-06-08 05:57:37.791834 WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App plugin <= 11.18 versions.
Published: 2023-05-04T13:20:58.596Z
Updated: 2026-04-28T16:08:11.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22702 vulnerable 2026-06-08 05:54:26.927270 WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.13 versions.
Published: 2023-03-23T14:42:01.685Z
Updated: 2026-04-28T16:07:59.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.