Hakeemnala vulnerabilities
We track 4 vulnerabilities in Hakeemnala products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 11, 2025.
Latest Hakeemnala vulnerabilities
- 9.8 Critical severity
Build App Online: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hakeemnala Build App Online build-app-online allows PHP Local File Inclusion.This issue affects Build App Online: from n/a through <= 1.0.2
- 9.8 Critical severity
Build App Online: Inclusion of Functionality from Untrusted Control Sphere
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hakeemnala Build App Online build-app-online allows PHP Local File Inclusion.This issue affects Build App Online: from n/a through <= 1.0.2
- 8.8 High severity
Build App Online: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through <= 1.0.23.
- 9.8 Critical severity
Build App Online: Weak Password Recovery Mechanism for Forgotten Password
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by gu