Cross-Site Scripting Vulnerability in Amauri WPMobile.App for WordPress
CVE-2025-62074

7.1HIGH

Key Information:

Vendor

WordPress
Status
WPmobile.app
Vendor
CVE Published:
6 November 2025

What is CVE-2025-62074?

A Cross-Site Scripting (XSS) vulnerability has been identified in Amauri WPMobile.App, which can allow attackers to inject malicious scripts into web pages viewed by other users. This weakness can lead to unauthorized actions performed by users and potentially compromise sensitive information. The flaw affects WPMobile.App versions from n/a up to and including 11.71, making it essential for users to update their installations to safeguard against such attacks.

Affected Version(s)

WPMobile.App <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/wpap...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k | Patchstack Bug Bounty Program
JSON
.
CVE-2025-62074 : Cross-Site Scripting Vulnerability in Amauri WPMobile.App for WordPress