Live › vulnerability › CVE-2026-112359
Go to dashboardWPMobile.App, a WordPress plugin by Amauri.IO (wpappninja), has a missing authorization check that lets requests reach functions they should not. The sources describe it as exploiting incorrectly configured access control levels, so an unauthenticated or low-privileged user may be able to perform actions or read data reserved for others.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the WPMobile.App WordPress plugin at version or earlier are in scope. Sites that do not have the plugin installed are not affected; the sources do not say whether specific configurations change exposure.
11.86No product ranges from the sources yet.
wp plugin get wpmobile-app --field=version (plugin slug unknown from sources, verify)11.86 or earlier11.86; the fixed version number is unknown from sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.
This page as .md · .json · in your agent: get_signal("CVE-2026-112359")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.