CVE-2026-104799 | rnlab Mobile builder Plugin up to 1.4.2 on WordPress REST wcfm-profile-settings wcfmmp_profile_settings key/data privileges management

A vulnerability has been found in rnlab Mobile builder Plugin up to 1.4.2 on WordPress and classified as critical. Affected by this vulnerability is the function wcfmmp_profile_settings of the file /mobile-builder/v1/wcfm-profile-settings of the component REST Handler. This manipulation of the argument key/data causes improper privilege management.

This vulnerability is registered as CVE-2026-104799. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More