CVE-2026-61984: WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

Q: What is the severity of CVE-2026-61984?

CVE-2026-61984 has a severity score of 7.5, indicating it is a high-risk vulnerability.

Q: What is the nature of CVE-2026-61984?

CVE-2026-61984 is an unauthenticated Broken Access Control vulnerability found in WPMobile.App versions up to 11.77.

Q: How can I fix CVE-2026-61984?

To mitigate CVE-2026-61984, update the WPMobile.App plugin to the latest version that addresses this access control vulnerability.

Q: Who is affected by CVE-2026-61984?

Websites using the WPMobile.App plugin version 11.77 or earlier are vulnerable to CVE-2026-61984.

Q: What impact does CVE-2026-61984 have?

CVE-2026-61984 can allow unauthorized users to access sensitive information due to broken access controls.

Published Aug 13, 2026

Updated

Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.

Affected Software

1 affected component

WordPress WPMobile.App<=11.77

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress WPMobile.App plugin to a version that resolves this vulnerability.
Fixed in 11.78

Event History

Aug 13, 2026

CVE Published

via MITRE·01:36 PM

Data Sourced

via MITRE·01:36 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-61984?

CVE-2026-61984 has a severity score of 7.5, indicating it is a high-risk vulnerability.

What is the nature of CVE-2026-61984?

CVE-2026-61984 is an unauthenticated Broken Access Control vulnerability found in WPMobile.App versions up to 11.77.

How can I fix CVE-2026-61984?

To mitigate CVE-2026-61984, update the WPMobile.App plugin to the latest version that addresses this access control vulnerability.

Who is affected by CVE-2026-61984?