high7.5
CVE-2025-13029
The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attack…
Impact
The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users.
Affected products
| Product | Affected versions |
|---|---|
| Knowband Mobile App Builder WordPress Plugin | before 3.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.