Plugin icon

Build App Online

build-app-online
Plugin closed

Vulnerabilities:

8

Last Updated:

December 3, 2024

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-08-14
Title
Build App Online <= 1.0.23 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-04-09
Title
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-01-06
Title
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
Fixed in
No known fix
CVSS
8.1 (high)
Published
2024-11-28
Title
Build App Online <= 1.0.23 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2023-12-27
Title
Build App Online < 1.0.21 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 1.0.21
CVSS
8.8 (high)
Published
2023-12-27
Title
Build App Online < 1.0.22 - Unauthenticated Account Takeover via Weak Password Reset Mechanism
Fixed in
Fixed in 1.0.22
CVSS
9.8 (critical)
Published
2022-12-06
Title
Build App Online < 1.0.19 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.0.19
CVSS
8.6 (high)