TI-2026-85035 CVE-2026-104799 · GHSA-9pxh-r9hv-cxqf
Privilege escalation in Mobile builder plugin for WordPress
Priority MEDIUM 40
The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the `wcfmmp_profile_settings()` REST handler exposed at `POST /mobile-builder/v1/wcfm-profile-…