{"uuid": "7206e3da-6e05-4b75-a850-f770a11b2670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94541", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwv64ngwj62h", "content": "WPMobile.App plugin (<=11.82) hit by CRITICAL vulnerability (CVE-2026-94541): attackers can grab reset URLs & hijack accounts if mail-to-push is on. Disable that feature ASAP. https://radar.offseq.com/threat/cve-2026-94541-cwe-862-missing-authorization-in-amauric-wpmobileapp-android-and-ios-app-b...", "creation_timestamp": "2026-10-02T10:30:26.840866Z"}