{"uuid": "253360a9-cb31-4f35-a1a2-e0a34bff3e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94541", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117370848802242230", "content": "CVE-2026-94541: CRITICAL auth bypass in WPMobile.App plugin (<=11.82) exposes password-reset URLs via mail-to-push, risking admin account takeover. Disable mail-to-push until patched. https://radar.offseq.com/threat/cve-2026-94541-cwe-862-missing-authorization-in-amauric-wpmobileapp-android-and-ios-app-builder-544a87f570200da9 #OffSeq #WordPress #CVE202694541 #Infosec", "creation_timestamp": "2026-10-02T10:30:24.717601Z"}