Description
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83.
Published: 2026-09-30
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Sensitive Data Exposure
Action: Apply Patch
AI Analysis

Impact

A missing authorization flaw in the Amauri.IO WPMobile.App plugin permits unauthenticated users to request embedded sensitive data that the plugin should restrict. The vulnerability could allow a malicious actor to access confidential information stored or displayed by the plugin, thereby compromising data confidentiality.

Affected Systems

WordPress sites that have installed the Amauri.IO WPMobile.App plugin version 11.83 or earlier are affected. Any deployment of the plugin prior to the 11.84 release is susceptible.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. EPSS is not available, so the likelihood of exploitation remains uncertain. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is an unauthenticated HTTP request to the plugin’s API endpoint, because the flaw is a missing authorization check.

Generated by OpenCVE AI on September 30, 2026 at 13:29 UTC.

Remediation

Vendor Solution

Update the WordPress WPMobile.App plugin to the latest available version (at least 11.84).

OpenCVE Recommended Actions

  • Update the WordPress WPMobile.App plugin to version 11.84 or newer.
  • Scan all WordPress installations in your environment and replace or remove older plugin versions.
  • Restrict access to the plugin’s API endpoints to authenticated users only; verify that proper authorization checks are enforced.

Generated by OpenCVE AI on September 30, 2026 at 13:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Amauri
Amauri wpmobile.app
Wordpress-extensions
Wordpress-extensions wpmobile.app
Vendors & Products Amauri
Amauri wpmobile.app
Wordpress-extensions
Wordpress-extensions wpmobile.app

Wed, 30 Sep 2026 11:15:00 +0000

Type Values Removed Values Added
Description Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83.
Title WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Weaknesses CWE-862
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Amauri Wpmobile.app
Wordpress-extensions Wpmobile.app
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-09-30T13:37:20.706Z

Reserved: 2026-09-23T00:18:19.473Z

Link: CVE-2026-96342

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-09-30T11:16:48.263

Modified: 2026-09-30T14:18:07.807

Link: CVE-2026-96342

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T20:33:51Z

Weaknesses