Mobile builder vulnerabilities
We track 3 vulnerabilities in Mobile builder products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
Latest Mobile builder vulnerabilities
- 8.6 High severity
Mobile builder: Improper Neutralization of Special Elements used in an SQL Command
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
- 8.8 High severity
Mobile builder: Improper Privilege Management
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administ
- 9.8 Critical severity
Mobile builder: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through <= 1.4.2.