Extension WordPress
Vulnérabilités App Builder – Create Native Android & iOS Apps On The Flight
Cette page rassemble les failles publiées pour App Builder – Create Native Android & iOS Apps On The Flight, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de App Builder – Create Native Android & iOS Apps On The Flight
7 fiches
App Builder <= 5.5.10 – Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. This is due to missing authorization validation…
*-5.6.0
Non indiqué
01/05/2026
App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 – Unauthenticated Privilege Escalation via 'role' Parameter
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.5.10. This is due to the `verify_role()` function in `AuthTrails.php`…
*-5.5.10
Non indiqué
20/03/2026
App Builder <= 5.5.7 – Missing Authorization
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.5.7.…
*-5.5.7
5.5.8
19/06/2025
App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 – Privilege Escalation and Account Takeover via Weak OTP
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verify_otp_forgot_password()…
*-5.3.7
5.3.8
24/10/2024
App Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 – Unauthenticated Limited SQL Injection via app-builder-search
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping…
*-4.3.3
4.3.4
20/08/2024
App Builder <= 3.8.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 3.8.8 due to insufficient input…
*-3.8.8
3.8.9
16/04/2024
App Builder <= 3.8.7 – Open Redirection
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.8.7. This is due to insufficient validation on the redirect…
*-3.8.7
3.8.8
05/04/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.