CVE-2017-1002001

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com

published September 14, 2017

CVSS
β€”
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

⚠️ A hidden gem of a vulnerability lurks in the mobile-app-builder-by-wappress plugin for WordPress! It has bundled unlicensed vulnerable CMS software without a care in the world! 🚨 Think of this like a restaurant serving food made with expired ingredients β€” it might look good on the outside, but one bite could leave guests regretting their choice! Just like that, this plugin hides a risky software component that could compromise your site. If exploited, this vulnerability could lead to unauthorized access or manipulation of your content, putting your entire website at risk. While there's no known widespread exploitation yet, that doesn't mean you should ignore it β€” prevention is key!

Put simply

Think of this like a restaurant serving food made with expired ingredients β€” it might look good on the outside, but one bite could leave guests regretting their choice! Just like that, this plugin hides a risky software component that could compromise your site. This vulnerability stems from the inclusion of unlicensed, vulnerable CMS software, which could open up pathways for attackers to exploit your WordPress site through the plugin.

What to do

If exploited, this vulnerability could lead to unauthorized access or manipulation of your content, putting your entire website at risk. While there's no known widespread exploitation yet, that doesn't mean you should ignore it β€” prevention is key! To safeguard your site, update the mobile-app-builder-by-wappress plugin to a newer, more secure version, or consider removing it altogether if an alternative exists. Regularly audit your plugins for security flaws and ensure you only use trusted sources. You've got this! With a proactive approach, you'll keep your site secure and maintain your superhero status in the digital world! πŸ¦Έβ€β™‚οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11146 Β· 95.9th percentile
Published
2017-09-14T13:00Z
EPSS history
Timeline
  • 14 SEP 13:00Z
    Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com
    cvelistv5