Advisories · Technology
Mobile builder.
Every CVE that names Mobile builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter
- Mobile builder
- SQL injection
- CVSS 8.6 High
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
- Mobile builder
- SQL injection
- CVSS 8.8 High
Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin
- Mobile builder
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability
- Mobile builder
- Authentication bypass