TI-2026-03149 CVE-2026-3651 · GHSA-xcmm-m27h-87pr
Missing authorization in hakeemnala Build App Online
Priority LOW 30
The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23.
Vulnerabilities
8 records
TI-2025-33216 CVE-2025-53249 · GHSA-c3p8-j2p3-6354
WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability
Priority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through <= 1.0.23.
TI-2025-23642 CVE-2025-32577 · GHSA-5fv5-h392-m4q3
WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability
Priority MEDIUM 50
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hakeemnala Build App Online build-app-online allows PHP Local File Inclusion.This issue affects Bui…
TI-2024-33135 CVE-2024-49649 · GHSA-j6w8-j3gw-86hg
WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability
Priority MEDIUM 50
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hakeemnala Build App Online build-app-online allows PHP Local File Inclusion.This issue affects Bui…
TI-2024-35949 CVE-2024-53751 · GHSA-mh5g-q2mv-4wjm
WordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through <= 1.0.23.
TI-2023-06644 CVE-2023-7264 · GHSA-mxcr-f478-crp2
Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
Priority MEDIUM 44
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22.
TI-2023-28131 CVE-2023-51479 · GHSA-xpqv-f82r-327v
WordPress Build App Online plugin <= 1.0.19 - Authenticated Privilege Escalation vulnerability
Priority MEDIUM 41
Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19.
TI-2023-28130 CVE-2023-51478 · GHSA-6x77-72j8-vq6j
WordPress Build App Online plugin <= 1.0.19 - Unauthenticated Account Takeover vulnerability
Priority MEDIUM 50
Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19.