WordPress plugin
Appmax security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Appmax vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint ≤1.0.3No patch available | CVE-2026-3641 |
- Medium5.3Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint
≤1.0.3No patch available
Appmax: common questions
Does Appmax have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Appmax: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Appmax I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Appmax vulnerability?
CVE-2026-3641, published Mar 20, 2026: Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint. Severity: Medium (CVSS 5.3).
Is any Appmax vulnerability listed in CISA KEV?
No. None of the known Appmax vulnerabilities is currently listed in the CISA KEV catalog.