PT-2025-44374 · WordPress · Apppresser – Mobile App Framework

D01Exploit Official · Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-11881

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AppPresser – Mobile App Framework plugin for WordPress versions through 4.5.0

Description The AppPresser – Mobile App Framework plugin for WordPress is susceptible to unauthorized data access. A missing capability check within the myappp verify function allows unauthenticated attackers to extract sensitive information. This data includes plugin and theme names and version numbers, potentially enabling targeted attacks against vulnerable components.

Recommendations Update to a version beyond 4.5.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-11881

Affected Products

Apppresser – Mobile App Framework

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-11881 · Security Note
• https://t.me/CVEtracker/36154 · Telegram Post
• https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L879 · Note
• https://t.me/cveNotify/140930 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3385855 · Note
• https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L162 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/62c3f54c-6bfb-4f11-9457-a09d28f83175?source=cve · Note
• https://twitter.com/CVEnew/status/1983795028469141726 · Twitter Post