CVE-2026-94541Published
WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-94541 · Microsoft / collected KEV context
cve-program · CVE-2026-94541
- https://www.wordfence.com/threat-intel/vulnerabilities/id/18fddc88-53d5-42c0-946f-f88ef6abb39f?source=cve
- https://plugins.trac.wordpress.org/browser/wpappninja/trunk/inc/functions/sdk2019.php#L256
- https://plugins.trac.wordpress.org/browser/wpappninja/trunk/inc/api/read_enhanced.php#L171
- https://plugins.trac.wordpress.org/browser/wpappninja/trunk/inc/common/deeplinking.php#L249
- https://plugins.trac.wordpress.org/browser/wpappninja/trunk/inc/api/push.php#L467
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.