Vulnerabilities

TI-2025-10892 CVE-2025-11881 · GHSA-p249-r59g-9mxg

Missing authorization in scottopolis AppPresser – Mobile App Framework

LOW 30

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myappp_verify' function in all versions up to, and including, 4.5.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2025-10-30 No fix listed CWE-862

TI-2025-01345 CVE-2025-1561 · GHSA-x8w2-qrcv-wgc3

AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting

LOW 38

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and ou…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00333 Published 2025-03-13 No fix listed CWE-79

TI-2024-10214 CVE-2024-11024 · GHSA-mf8w-vg63-44j5

AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset

MEDIUM 50

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00698 Published 2024-11-26 No fix listed CWE-230

TI-2024-08637 CVE-2024-9305 · GHSA-rq4q-7xvx-8f5w

AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP

MEDIUM 44

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2024-10-16 No fix listed CWE-640

TI-2024-04293 CVE-2024-4611

AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass

LOW 38

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00501 Published 2024-05-29 No fix listed CWE-703

TI-2024-21650 CVE-2024-32776 · GHSA-xhvc-5m26-373f

WordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00456 Published 2024-05-10 No fix listed CWE-862

TI-2024-20746 CVE-2024-31374 · GHSA-78f4-mrhm-jmvg

WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Scott Bolinger AppPresser apppresser allows Cross Site Request Forgery.This issue affects AppPresser: from n/a through <= 4.3.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-04-15 No fix listed CWE-352

TI-2024-20644 CVE-2024-31268 · GHSA-rq96-pq8h-xj6x

WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00322 Published 2024-04-12 No fix listed CWE-352

TI-2023-03901 CVE-2023-4214 · GHSA-4jjc-6xj9-r5q6

AppPresser <= 4.2.5 - Insecure Password Reset Mechanism

MEDIUM 45

The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00917 Published 2023-11-18 No fix listed CWE-620

Vulnerabilities

Filters