WPMobile.App – Android and iOS App Builder vulnerabilities

Product

WPMobile.App – Android and iOS App Builder

by amauric · last CVE Oct 3, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 0Medium 1Low 0

Severity

Exploitation

Watch

Add WPMobile.App – Android and iOS App Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-94541	9.8	0%	Oct 2	WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter Affected: through 11.82
CVE-2026-103421	5.4	0%	Oct 3	WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment Affected: through 11.84