appmysite vulnerabilities

Products

• AppMySite 3
• AppMySite – Create an app with the Best Mobile App Builder 1
• AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) 1

Latest appmysite CVEs

Newest publication first

1. CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability

   Published 2026-09-23

   Medium·CVSS 6.5 EPSS 0.33%

   Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions.

2. CVE-2026-13770 AppMySite <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via save_ams_license_key AJAX Handler

   Published 2026-09-19

   Medium·CVSS 6.4 EPSS 0.35%

   The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via save_ams_license_key AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization...

3. CVE-2025-58679 WordPress AppMySite plugin <= 3.15.0 - Broken Access Control vulnerability

   Published 2025-09-22

   Medium·CVSS 5.3 EPSS 0.28%

   Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AppMySite: from n/a through <= 3.15.0.

4. CVE-2023-49762 WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure

   Published 2023-12-21

   High·CVSS 7.5 EPSS 0.45%

   Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AppMySite AppMySite – Create an app with the Best Mobile App Builder.This issue affects AppMySite – Create an app with the Best Mobile App Builder: from n/a through 3.11.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.