8 matches found
CVE-2025-68860
WordPress Mobile Builder = 1.4.2 - Broken Authentication CVE-2025-68860 Description The WordPress Mobile Builder plugin version 1.4.2 and below has a Broken Authentication vulnerability that allows an attacker to generate a valid JWT token with the default secret "examplekey" and authenticate as...
WordPress Mobile builder plugin <= 1.4.2 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Raphael P. Cigana in WordPress Plugin Mobile builder versions = 1.4.2...
WordPress Mobile builder plugin <= 1.4.2 - Subscriber+ Privilege Escalation to Admin vulnerability
Subscriber+ Privilege Escalation to Admin vulnerability discovered by Raphael P. Cigana in WordPress Plugin Mobile builder versions = 1.4.2...
WordPress Mobile builder plugin <= 1.4.2 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Raphael P. Cigana in WordPress Plugin Mobile builder versions = 1.4.2...
Exploit for CVE-2025-68860
CVE-2025-68860 WordPress Mobile builder Plugin = 1.4.2 is...
CVE-2025-68860
CVE-2025-68860 affects the WordPress Mobile Builder plugin (versions through 1.4.2). The vulnerability is an Authentication Bypass via an Alternate Path or Channel, enabling authentication abuse and potentially full site compromise. The connected exploit document describes a remote attacker craft...
CVE-2025-68860 WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...
CVE-2025-68860 WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...