APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps

APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (40%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

2 of the records (40%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2023.

4 independent researchers contributed these findings, one record each.

01234567891004.03.2022Today04.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202218.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202324.03.20255.3AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure CVSS 5.3 · 24.03.202509.10.20255.3AppExperts <= 1.4.5 - Unauthenticated Sensitive Information Exposure CVSS 5.3 · 09.10.202522.01.20266.5AppExperts <= 1.4.5 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 22.01.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage40%
Open

3

Fixed

2

Get automatic notifications for all APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2025-68881

AppExperts <= 1.4.5 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

5 records
Showing 1–5 of 5 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C