Veille CVE

Recherche « Unknown Mobile builder »

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Mobile builder » ✕
  1. CVE-2026-103696 6.8 Moyenne

    Unknown Mobile builder

    The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.

  2. CVE-2026-103695 8.6 Élevée

    Unknown Mobile builder

    The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.

  3. CVE-2026-103694 8.8 Élevée

    Unknown Mobile builder

    The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.