https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:34:15.438067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283607 EUVD-2026-283607 2026-10-06T07:34:15.441816+00:00 EUVD-2026-283607 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11024 fkie_cve-2024-11024 2026-10-06T07:34:15.441849+00:00

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possible for unauthenticated attackers, with knowledge of a user's email address, to reset the user's password and gain access to their account.

 https://cve.radiocsirt.org/vuln/ghsa-mf8w-vg63-44j5 GHSA-mf8w-vg63-44j5 2026-10-06T07:34:15.441884+00:00

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possible for unauthenticated attackers, with knowledge of a user's email address, to reset the user's password and gain access to their account.