Cross-Site Request Forgery Vulnerability in Build App Online by Akeemnala
CVE-2025-53249

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Build App Online
Vendor
CVE Published:
14 August 2025

What is CVE-2025-53249?

A Cross-Site Request Forgery (CSRF) vulnerability has been detected in Build App Online developed by Akeemnala. This security flaw allows malicious actors to perform unauthorized actions on behalf of the user, which could compromise user data and application integrity. The affected versions include all releases from the initial launch up to version 1.0.23. It is crucial for users of Build App Online to implement protective measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Build App Online <= 1.0.23

References

https://patchstack.com/database/wordpress/plugin/build-ap...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

theviper17 (Patchstack Alliance)
.
CVE-2025-53249 : Cross-Site Request Forgery Vulnerability in Build App Online by Akeemnala