Advisories · Technology

hakeemnala Build App Online.

Every CVE that names hakeemnala Build App Online among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-3651 CVE record

CVSS 5.3 Medium

Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action
- hakeemnala Build App Online
- Broken access control
Not analysed yet 21 Mar 2026
CVE-2025-53249 CVE record

CVSS 6.5 Medium

WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability
- hakeemnala Build App Online
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2025-32577 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability
- hakeemnala Build App Online
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2024-49649 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability
- hakeemnala Build App Online
- File inclusion
Not analysed yet 7 Jan 2025
CVE-2024-53751 CVE record

CVSS 5.4 Medium

WordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability
- hakeemnala Build App Online
- Cross-site request forgery (CSRF)
Not analysed yet 2 Dec 2024
CVE-2023-7264 CVE record

CVSS 8.1 High

Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
- hakeemnala Build App Online
- CWE-640
Not analysed yet 11 Jun 2024