Missing Authorization Vulnerability in Amauri.IO WPMobile.App
CVE-2026-96342

6.9MEDIUM

Key Information:

Vendor

WordPress
Status
WPmobile.app
Vendor
CVE Published:
30 September 2026

What is CVE-2026-96342?

A missing authorization vulnerability in Amauri.IO's WPMobile.App could allow unauthorized users to retrieve sensitive embedded data. This issue impacts versions from n/a through 11.83, posing a risk to data security by exposing critical information that should be protected. Users of WPMobile.App should review their security measures to mitigate potential risks associated with this vulnerability.

Affected Version(s)

WPMobile.App 0 <= 11.83

References

https://patchstack.com/database/wordpress/plugin/wpappnin...
vdb-entry

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.