Veille CVE

Dimanche 11 octobre 2026

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Mobile builder » ✕
  1. CVE-2026-103695 8.6 Élevée

    Unknown Mobile builder

    The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.

  2. CVE-2026-103694 8.8 Élevée

    Unknown Mobile builder

    The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.