WordPress plugin
AppPresser – Mobile App Framework security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium4
- Low0
All AppPresser – Mobile App Framework vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Unauthenticated Limited Sensitive Information Exposure ≤4.5.0Update to 4.5.1 | CVE-2025-11881 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤4.4.10Update to 4.4.11 | CVE-2025-1561 | |
| Critical9.8 | Unauthenticated Privilege Escalation via Password Reset ≤4.4.6Update to 4.4.7 | CVE-2024-11024 | |
| High8.1 | Privilege Escalation and Account Takeover via Weak OTP ≤4.4.4Update to 4.4.5 | CVE-2024-9305 | |
| High8.1 | Improper Missing Encryption Exception Handling to Authentication Bypass ≤4.3.2Update to 4.4.0 | CVE-2024-4611 | |
| Medium5.3 | Missing Authorization ≤4.3.0Update to 4.3.1 | CVE-2024-32776 | |
| Medium4.3 | Cross-Site Request Forgery via force_logging_off() ≤4.3.0Update to 4.3.1 | CVE-2024-31374 | |
| Medium4.3 | Cross-Site Request Forgery via toggle_logging_callback() ≤4.3.0Update to 4.3.1 | CVE-2024-31268 | |
| High8.1 | Insecure Password Reset Mechanism ≤4.2.5Update to 4.3.0 | CVE-2023-4214 |
- Medium5.3Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
≤4.5.0Update to 4.5.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤4.4.10Update to 4.4.11
- Critical9.8Unauthenticated Privilege Escalation via Password Reset
≤4.4.6Update to 4.4.7
- High8.1Privilege Escalation and Account Takeover via Weak OTP
≤4.4.4Update to 4.4.5
- High8.1Improper Missing Encryption Exception Handling to Authentication Bypass
≤4.3.2Update to 4.4.0
- Medium5.3Missing Authorization
≤4.3.0Update to 4.3.1
- Medium4.3Cross-Site Request Forgery via force_logging_off()
≤4.3.0Update to 4.3.1
- Medium4.3Cross-Site Request Forgery via toggle_logging_callback()
≤4.3.0Update to 4.3.1
- High8.1Insecure Password Reset Mechanism
≤4.2.5Update to 4.3.0
AppPresser – Mobile App Framework: common questions
Does AppPresser – Mobile App Framework have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in AppPresser – Mobile App Framework: 1 critical, 4 high, 4 medium. None are known to affect version null.
How do I check which version of AppPresser – Mobile App Framework I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent AppPresser – Mobile App Framework vulnerability?
CVE-2025-11881, published Oct 29, 2025: AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure. Severity: Medium (CVSS 5.3).
Is any AppPresser – Mobile App Framework vulnerability listed in CISA KEV?
No. None of the known AppPresser – Mobile App Framework vulnerabilities is currently listed in the CISA KEV catalog.