TI-2026-21748 CVE-2026-27330 · GHSA-cjxc-xr6h-493gWordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerabilityPriority MEDIUM 43Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00358 · Published 2026-08-27 · No fix listed CWE-862
TI-2025-23703 CVE-2025-32638 · GHSA-4w8r-4268-4w28WordPress ShopApper plugin <= 0.4.61 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weptile Mobile App for WooCommerce mobile-app-for-woocommerce allows Stored XSS.This issue affects Mobile App for WooC…CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2025-04-17 · No fix listed CWE-79