WPMobile.App – Android and iOS App Builder
WPMobile.App – Android and iOS App Builder has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 14 are fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 8 of the records (57%). Other recurring categories include Missing Authorization, Code Injection.
Every one of the 14 issues recorded for WPMobile.App – Android and iOS App Builder has a vendor fix available, so running the current release closes all known holes.
13 independent researchers contributed these findings, most of them (2) reported by Peter Tang. WPMobile.App – Android and iOS App Builder is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-94541WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter
Read the full analysisVulnerability Records
WPMobile.App – Android and iOS App Builder
Author
Amauri
WPMobile.App turns your WordPress website into an Android and iOS mobile app that you can publish on Google Play and the Apple App Store. Customize your app from your WordPress dashboard, preview it on your phone for free, and purchase a lifetime license when you are ready to publish. Your app uses your existing website content, with your own branding and unlimited push notifications. No coding required. Try your app for free Your WordPress website, as a mobile app Keep managing your content in WordPress. Changes to your website content are reflected in the app, without having to publish a new app version for every new post or page. WPMobile.App uses a mobile-optimized WebView to display your website, with app features such as push notifications and a custom app icon. Customize your app from WordPress Set your app name, icon, colors and navigation from your WordPress dashboard. Your published app carries your own branding, with no WPMobile.App branding or advertising added by me. Unlimited push notifications Send notifications to bring users back to your app when you publish content, share an announcement or launch a promotion. Send push notifications manually. Automatically notify users about new posts. Use your Firebase and Apple accounts for notification delivery. No per-notification fees charged by WPMobile.App. App usage statistics View app usage statistics directly in WordPress, including installations, popular pages and device types. Statistics are hosted on your website. Test before you buy Install the plugin and use the free WPMobile.App demo app to preview your website on your phone. Check your design, navigation and key pages before purchasing a license. Preview your mobile app One-time payment, lifetime license The WordPress plugin is free to install. A paid WPMobile.App license is required to generate your own app for publication. Android: EUR 129. iOS: EUR 129. Android + iOS: EUR 239. Prices exclude VAT. Each option is a lifetime license with a one-time payment and no WPMobile.App subscription. Apple and Google developer accounts are required for store publication. Their registration or membership fees are separate from the WPMobile.App license. Guided publication Generate your app build from WPMobile.App, then follow the step-by-step instructions to submit it using your own Google Play or Apple developer account. You do not need to install Android Studio or Xcode to generate your build. Store approval remains subject to Apple and Google’s review requirements. Direct support from the developer Need help configuring your app or preparing it for publication? Get support directly from Amauri, the developer of WPMobile.App. Documentation and support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C