AppPresser – Mobile App Framework

AppPresser – Mobile App Framework has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 9 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2024 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (22%). Other recurring categories include Missing Authorization, Cross-Site Scripting.

Every one of the 9 issues recorded for AppPresser – Mobile App Framework has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, most of them (2) reported by István Márton. AppPresser – Mobile App Framework is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all AppPresser – Mobile App Framework vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-11024

AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset

Read the full analysis

Vulnerability Records

9 records


2025-10-29 00:00	AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure AppPresser <= 4.5.0	`CVE-2025-11881`	5.3 Medium	D01EXPLOIT OFFICIAL	Yes
2025-03-12 00:00	AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting AppPresser <= 4.4.10	`CVE-2025-1561`	7.2 High	wesley (wcraft)	Yes
2024-11-25 00:00	AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset AppPresser <= 4.4.6	`CVE-2024-11024`	9.8 Critical	shaman0x01	Yes
2024-10-15 00:00	AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP AppPresser <= 4.4.4	`CVE-2024-9305`	8.1 High	wesley (wcraft)	Yes
2024-05-28 00:00	AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass AppPresser <= 4.3.2	`CVE-2024-4611`	8.1 High	István Márton	Yes
2024-04-22 00:00	AppPresser <= 4.3.0 - Missing Authorization AppPresser <= 4.3.0	`CVE-2024-32776`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2024-04-10 00:00	AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off() AppPresser <= 4.3.0	`CVE-2024-31374`	4.3 Medium	Kévin Mosbahi (Mika)	Yes
2024-04-05 00:00	AppPresser <= 4.3.0 - Cross-Site Request Forgery via toggle_logging_callback() AppPresser <= 4.3.0	`CVE-2024-31268`	4.3 Medium	Dhabaleshwar Das	Yes
2023-11-16 00:00	AppPresser <= 4.2.5 - Insecure Password Reset Mechanism AppPresser <= 4.2.5	`CVE-2023-4214`	8.1 High	István Márton	Yes

Showing 1–9 of 9 reports

Latestv4.5.3

AppPresser – Mobile App Framework

Author

Scott Bolinger

3.7(53)

74/100

Last Updated

2026-03-24 (6mo ago)

Active Installs

1,000+

Downloads

235,279

Requires WP

4.7.0+

Requires PHP

Tested up to

WP 6.9.7

Created

2013-12-09 (13y ago)

AppPresser helps website builders make iOS/Android mobile apps out of WordPress sites simply and quickly. AppPresser allows you to use a WordPress site as an app, including access to device features such as the camera, contacts, and more. This plugin is not an app-creator in itself, it helps connect your app to WordPress. You must create an app with our app builder, then install this plugin on your WordPress site. What this plugin does: Is the base code for integrating your AppPresser app with your WordPress site Activates AppPresser code and theme when your site is viewed in an app Modifies WP-API requests to add featured image urls, used in the app Adds ajax functionality used in other AppPresser theme and plugins Adds a settings page How do I use it? Purchase a plan on AppPresser Install and activate this plugin on your WordPress site Follow the instructions in our documentation

View on WordPress.org