PoC Index85,079 CVEs with PoCs

CVE-2025-68860

WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

CRITICAL 9.8EPSS 0.5%

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through <= 1.4.2.

Affected
Mobile Builder · Mobile builder
CVSS v3.1 PATCHSTACK
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.54% chance of exploitation in the next 30 days, 44th percentile
Published
2025-12-29
Updated
2026-04-28

Proof-of-concept exploits (2)

References

Related