WordPress plugin
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High0
- Medium1
- Low0
All Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤5.2.3No patch available | CVE-2024-50527 | |
| Critical9.8 | Authentication Bypass via Account Takeover ≤5.2.3No patch available | CVE-2024-50477 |
- Critical9.8Unauthenticated Arbitrary File Upload
≤5.2.3No patch available
- Critical9.8Authentication Bypass via Account Takeover
≤5.2.3No patch available
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder: common questions
Does Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder: 2 critical, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder vulnerability?
CVE-2024-50527, published Oct 30, 2024: Stacks Mobile App Builder <= 5.2.3 - Unauthenticated Arbitrary File Upload. Severity: Critical (CVSS 9.8).
Is any Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder vulnerability listed in CISA KEV?
No. None of the known Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder vulnerabilities is currently listed in the CISA KEV catalog.