CVE-2026-61984

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

The WPMobile.App plugin versions up to 11.77 have a Broken Access Control vulnerability that can be exploited without authentication.

An attacker can access administrative functions or sensitive data, potentially leading to full system compromise.

Update the WPMobile.App plugin to the latest version that fixes this issue.

Original NVD description (English source)

Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.