More information about this CVE will likely be available in a few days

Description

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users.

Related CPE's

Could not find any relations

References

https://wpscan.com/vulnerability/22344534-cd36-4817-b683-c0af55759e01/

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-31T06:15:40.270

2 hours ago

Last modified

2025-12-31T06:15:40.270

2 hours ago