Unauthorized Data Access Vulnerability in AppPresser Mobile App Framework for WordPress

CVE-2025-11881

What is CVE-2025-11881?

The AppPresser – Mobile App Framework plugin for WordPress contains a vulnerability that allows unauthorized access to sensitive information. This is due to a missing capability check in the 'myappp_verify' function across all versions up to and including 4.5.0. Attackers without authentication can exploit this oversight to retrieve confidential data such as plugin and theme names, as well as their version numbers. These details could aid in targeting outdated or vulnerable components, increasing the risk of further attacks.

References