Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-54295 EUVD-2024-52418GHSA-4ffq-5gpq-hvrg

WordPress ListApp Mobile Manager plugin <= 1.7.7 - Account Takeover vulnerability

Published Dec 13, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mobile-manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through <= 1.7.7.

Affected products

VendorProductAffectedFixed
FluxBuilder ListApp Mobile Manager ≤ 1.7.7 —

References