WordPress plugin
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium2
- Low0
All WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Cross-Site Request Forgery ≤3.4.1No patch available | CVE-2023-37391 | |
| High7.5 | Sensitive Information Exposure <2.1.3Update to 2.1.3 | CVE-2015-9269 | |
| Medium5.3 | Information Disclosure <2.0.2Update to 2.0.2 | CVE-2014-5337 |
- Medium5.4Cross-Site Request Forgery
≤3.4.1No patch available
- High7.5Sensitive Information Exposure
<2.1.3Update to 2.1.3
- Medium5.3Information Disclosure
<2.0.2Update to 2.0.2
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps: common questions
Does WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps: 1 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps vulnerability?
CVE-2023-37391, published Jul 7, 2023: WordPress Mobile Pack <= 3.4.1 - Cross-Site Request Forgery. Severity: Medium (CVSS 5.4).
Is any WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps vulnerability listed in CISA KEV?
No. None of the known WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps vulnerabilities is currently listed in the CISA KEV catalog.