Vulnerabilities

TI-2024-08635 CVE-2024-9302 · GHSA-2m59-x3qc-r6mm

Weak password recovery in appcheap App Builder – Create Native Android & iOS Apps On The…

MEDIUM 44

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2024-10-25 No fix listed CWE-640

TI-2024-07091 CVE-2024-7651 · GHSA-q48r-75cv-4xwg

SQL injection in appcheap App Builder – Create Native Android & iOS Apps On The Flight

LOW 33

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insuf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0045 Published 2024-08-21 No fix listed CWE-89

TI-2024-20658 CVE-2024-31282 · GHSA-wh9j-8hrm-2g7r

WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability

LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00332 Published 2024-04-10 No fix listed CWE-601

Vulnerabilities

Filters

Weak password recovery in appcheap App Builder – Create Native Android & iOS Apps On The…

SQL injection in appcheap App Builder – Create Native Android & iOS Apps On The Flight

WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability