CVE-2025-11881

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11881", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-16T17:44:03.693Z", "datePublished": "2025-10-30T06:45:40.381Z", "dateUpdated": "2026-04-08T16:57:09.611Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:57:09.611Z"}, "affected": [{"vendor": "scottopolis", "product": "AppPresser \u2013 Mobile App Framework", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "4.5.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The AppPresser \u2013 Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myappp_verify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data including plugin and theme names and version numbers, which can be used to facilitate targeted attacks against outdated or vulnerable components."}], "title": "AppPresser \u2013 Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/62c3f54c-6bfb-4f11-9457-a09d28f83175?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L162"}, {"url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L879"}, {"url": "https://plugins.trac.wordpress.org/changeset/3385855/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "D01EXPLOIT OFFICIAL"}], "timeline": [{"time": "2025-10-24T09:23:35.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-10-29T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-30T14:11:03.158879Z", "id": "CVE-2025-11881", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-30T14:11:55.365Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11881", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-30T14:11:03.158879Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-30T14:11:31.734Z"}}], "cna": {"title": "AppPresser \u2013 Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure", "credits": [{"lang": "en", "type": "finder", "value": "D01EXPLOIT OFFICIAL"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "scottopolis", "product": "AppPresser \u2013 Mobile App Framework", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "4.5.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-24T09:23:35.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-10-29T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/62c3f54c-6bfb-4f11-9457-a09d28f83175?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L162"}, {"url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L879"}, {"url": "https://plugins.trac.wordpress.org/changeset/3385855/"}], "descriptions": [{"lang": "en", "value": "The AppPresser \u2013 Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myappp_verify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data including plugin and theme names and version numbers, which can be used to facilitate targeted attacks against outdated or vulnerable components."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-10-30T06:45:40.381Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11881", "state": "PUBLISHED", "dateUpdated": "2025-10-30T14:11:55.365Z", "dateReserved": "2025-10-16T17:44:03.693Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-30T06:45:40.381Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AppPresser \u2013 Mobile App Framework", "vendor": "scottopolis", "versions": [{"lessThanOrEqual": "4.5.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AppPresser \u2013 Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myappp_verify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data including plugin and theme names and version numbers, which can be used to facilitate targeted attacks against outdated or vulnerable components."}, {"lang": "es", "value": "El plugin AppPresser - Mobile App Framework para WordPress es vulnerable al acceso no autorizado a datos debido a una comprobaci\u00f3n de capacidad faltante en la funci\u00f3n 'myappp_verify' en todas las versiones hasta la 4.5.0, inclusive. Esto permite a atacantes no autenticados extraer datos sensibles, incluyendo nombres de plugins y temas y n\u00fameros de versi\u00f3n, lo que puede utilizarse para facilitar ataques dirigidos contra componentes desactualizados o vulnerables."}], "id": "CVE-2025-11881", "lastModified": "2026-10-08T10:10:00.227", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11881", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-30T14:11:03.158879Z", "version": "2.0.3"}}]}, "published": "2025-10-30T07:15:32.520", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L162"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.5.0/inc/AppPresser_WPAPI_Mods.php#L879"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3385855/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/62c3f54c-6bfb-4f11-9457-a09d28f83175?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T12:35:59.037489+00:00", "value": {"mitigation_remediation": ["Update the AppPresser plugin to 4.5.1 or later to include the missing capability check.", "Verify that the function 'myappp_verify' now enforces a capability requirement before returning data.", "If the upgrade cannot be applied immediately, restrict access to the AppPresser REST API endpoints by requiring authentication or by using a firewall rule to block unauthenticated requests."], "summary": {"action": "Apply Patch", "impact": "Unauthorized Information Disclosure"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all installations of the AppPresser \u2013 Mobile App Framework plugin up to and including version 4.5.0. The plugin is distributed by scottopolis and is commonly used on WordPress sites that rely on its mobile app framework capabilities.", "description_and_impact": "The AppPresser \u2013 Mobile App Framework plugin for WordPress contains a missing capability check in the 'myappp_verify' function. This flaw lets unauthenticated callers retrieve sensitive data such as plugin and theme names and their respective version numbers. The exposure is limited to informational data that could help an attacker target older or vulnerable components, but it does not provide direct control or code execution.", "risk_and_exploitability": "The CVSS score of 5.3 reflects moderate severity. The EPSS score is reported as < 1%, indicating a low likelihood of exploitation at this time. The flaw is not listed in the CISA KEV catalog. An attacker can exploit the missing authorization by sending unauthenticated HTTP requests to the plugin's REST API endpoint that triggers the 'myappp_verify' routine, thereby obtaining the exposed information. No privileged context or additional credentials are required for exploitation."}}}}, "created": "2025-10-30T14:37:17.695200+00:00", "updated": "2026-04-22T12:45:17.022562+00:00", "vendors": ["apppresser", "apppresser$PRODUCT$apppresser", "wordpress", "wordpress$PRODUCT$wordpress"]}