App Builder vulnerabilities

2 known vulnerabilities in App Builder from Appcheap. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  App Builder – Create Native Android & iOS Apps…: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2024-9302Oct 25, 2024Appcheap

  The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verify_otp_forgot_password() and update_password()

• 7.5 High severity

  App Builder – Create Native Android & iOS Apps…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-7651Aug 21, 2024Appcheap

  The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied pa