WPMobile.App

WPMobile.App has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 10 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (70%). Other recurring categories include Code Injection, Missing Authorization.

Every one of the 10 issues recorded for WPMobile.App has a vendor fix available, so running the current release closes all known holes.

10 independent researchers contributed these findings, one record each. WPMobile.App is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPMobile.App vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-62074

WPMobile.App <= 11.71 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

10 records


2026-08-13 00:00	WPMobile.App <= 11.77 - Missing Authorization WPMobile.App <= 11.77	`CVE-2026-61984`	5.3 Medium	Taylsec	Yes
2025-10-26 00:00	WPMobile.App <= 11.71 - Unauthenticated Stored Cross-Site Scripting WPMobile.App <= 11.71	`CVE-2025-62074`	7.2 High	LVT-tholv2k	Yes
2025-02-19 19:45	WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter WPMobile.App <= 11.56	`CVE-2024-13888`	7.2 High	Krzysztof Zając	Yes
2024-12-12 00:00	WPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode Execution WPMobile.App <= 11.52	`CVE-2024-12420`	6.5 Medium	Arkadiusz Hydzik	Yes
2024-09-30 00:00	WPMobile.App <= 11.50 - Reflected Cross-Site Scripting WPMobile.App <= 11.50	`CVE-2024-47349`	6.1 Medium	Le Ngoc Anh	Yes
2024-08-26 00:00	WPMobile.App <= 11.48 - Reflected Cross-Site Scripting WPMobile.App <= 11.48	`CVE-2024-43933`	6.1 Medium	Muhammad Daffa	Yes
2024-06-06 00:00	WPMobile.App — Android and iOS Mobile Application <= 11.41 - Reflected Cross-Site Scripting WPMobile.App <= 11.41	`CVE-2024-35694`	6.1 Medium	CatFather	Yes
2023-03-30 00:00	WPMobile.App <= 11.20 - Authenticated (Administrator+) Stored Cross-Site Scripting WPMobile.App <= 11.20	`CVE-2023-28932`	4.4 Medium	Juampa Rodríguez	Yes
2023-02-23 00:00	WPMobile.App — Android and iOS Mobile Application <= 11.18 - Authenticated (Administrator+) Stored Cross-Site Scripting WPMobile.App <= 11.18	`CVE-2023-26010`	4.4 Medium	Rio Darmawan	Yes
2023-01-20 00:00	WPMobile.App — Android and iOS Mobile Application <= 11.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes WPMobile.App <= 11.13	`CVE-2023-22702`	6.4 Medium	István Márton	Yes

Showing 1–10 of 10 reports

Latestv11.80

WPMobile.App

Author

Amauri

4.8(162)

96/100

Last Updated

2026-08-20 (24d ago)

Active Installs

3,000+

Downloads

567,141

Requires WP

3.7.0+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2015-08-18 (11y ago)

Android and iOS mobile app 💳 LIFETIME LICENCE – No subscription, no hidden fees. Android 129€ // iOS 129€ // Android + iOS 239€ 🎉 FREE TEST – You can test your mobile app with the demo app. 🖌 CUSTOMIZATION – No mention of our brand or advertisement, the mobile app is white-labeled. 📲 GREAT COMPATIBILITY – The mobile apps is compatible with smartphones and tablets, always up-to-date. 👌 VERY EASY PUBLISH – I take care of all the technical work, no software to download or complicated manipulation to do. 💬 SUPPORT TEAM – I’m here to help and answer all your requests as quickly as possible. 👍 AUTOMATIC APP UPDATE – When new content is released, the application is automatically updated. 📢 NOTIFICATIONS – Unlimited push notification: manually or with automated push. 📈 REAL-TIME STATISTICS – Stats about the app usage, all statistics are real-time and hosted on your site.

View on WordPress.org