Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com.
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.11146·Published 2017-09-14·Fixed in 1.05CWE-434