Skip to content
OpenAdvisories

Product · rahulbhangale

WpMobi

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8909

    WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action

    The WpMobi plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.3. This is due to missing or incorrect nonce validation on the handleSaveGeneralSettings function. This makes it possible for unauthenticated…

    rahulbhangale WpMobi Web / CMS