Unauthorized Data Access Vulnerability in AppPresser Mobile App Framework for WordPress

CVE-2025-11881

What is CVE-2025-11881?

The AppPresser – Mobile App Framework plugin for WordPress contains a vulnerability that allows unauthorized access to sensitive information. This is due to a missing capability check in the 'myappp_verify' function across all versions up to and including 4.5.0. Attackers without authentication can exploit this oversight to retrieve confidential data such as plugin and theme names, as well as their version numbers. These details could aid in targeting outdated or vulnerable components, increasing the risk of further attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References