CVE-2026-112359: WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The supplied CVSS vector indicates it is remotely exploitable over the network with low attack complexity, requires no privileges, and requires no user interaction.

Q: What is the impact of successful exploitation?

The supplied severity data indicates high confidentiality impact, while integrity and availability impact are rated none.

Q: Which versions are affected?

WPMobile.App versions through 11.86 are identified as affected. The lower affected version bound is not specified.

Published Oct 23, 2026

Updated

Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.

Affected Software

1 affected component

Amauri.IO WPMobile.App<=11.86

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress WPMobile.App plugin to a version that resolves this vulnerability.
Fixed in 11.87

Event History

Oct 23, 2026

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The supplied CVSS vector indicates it is remotely exploitable over the network with low attack complexity, requires no privileges, and requires no user interaction.

What is the impact of successful exploitation?