Build App Online

Vulnerabilities 10Slug build-app-onlineLatest version 1.0.23WordPress.org →Closed
N/A Unfixed Closed
2026-03-20≤ 1.0.23

Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action

WordfenceCVE
Medium 6.5 Unfixed Closed
2025-08-14≤ 1.0.23

CVE-2025-53249

CVEWordfenceEUVD
Critical 9.8 Unfixed Closed
2025-04-11≤ 1.0.23

CVE-2025-32577

CVEEUVDWordfence
Critical 9.8 Unfixed Closed
2025-01-07≤ 1.0.23

CVE-2024-49649

CVEWordfence
Critical 9.8 Closed
2024-06-11< 1.0.23

CVE-2023-7264

CVEWordfence
N/A Unfixed Closed
2024-05-18≤ 1.0.21

CVE-2024-3658

CVEWordfence
Critical 9.8 Closed
2024-12-27< 1.0.22

WordPress Build App Online Plugin <= 1.0.19 is vulnerable to Privilege Escalation

PatchstackCVEWordfenceWPScan
High 8.8 Closed
2024-12-27< 1.0.21

WordPress Build App Online Plugin <= 1.0.19 is vulnerable to Privilege Escalation

PatchstackCVEWordfenceWPScan
Critical 9.8 Closed
2023-12-06< 1.0.19

WordPress Build App Online Plugin < 1.0.19 is vulnerable to SQL Injection

PatchstackCVEWordfenceWPScan