CVE-2025-68860

WordPress Mobile Builder = 1.4.2 - 인증 우회 CVE-2025-68860 설명 WordPress Mobile builder 플러그인 버전 1.4.2 이하는 인증 우회 취약점이 존재하며, 공격자는 기본 시크릿 "examplekey"로 유효한 JWT 토큰을 생성하여 관리자userid=1로 인증할 수 있습니다. 해당 토큰을 사용하여 공격자는 새로운 관리자 계정을 생성하고 사이트를 장악할 수 있습니다. 취약점 세부 정보 CVE: CVE-2025-68860 원인: JWT에 하드코딩된 시크릿 키...

Exploit for CVE-2025-68860

CVE-2025-68860 WordPress Mobile builder Plugin = 1.4.2 is...

CVE-2025-68860 WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...

CVE-2025-68860 WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...

CVE-2025-68860

CVE-2025-68860 affects the WordPress Mobile Builder plugin (versions through 1.4.2). The vulnerability is an Authentication Bypass via an Alternate Path or Channel, enabling authentication abuse and potentially full site compromise. The connected exploit document describes a remote attacker craft...