PatchTheCVEbuild app online vulnerabilities and fixes
Recent CVEs affecting build app online, with upgrade or downgrade steps. 4 tracked.
Also searched as: buildapponline.
build app online has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-01-07. Highest priority: CVE-2024-49649 (score 51/100).
- CVE-2024-53751 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online build-app-online allows Cross S
- CVE-2024-49649 CRITICAL 9.8 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2023-7264 HIGH 8.1 UPGRADE The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mecha
- CVE-2023-51479 HIGH 8.8 UPGRADE Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This
FAQ
How do I fix build app online vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is build app online being exploited right now?
None of the tracked build app online CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which build app online CVE should I patch first?
CVE-2024-49649 currently ranks highest (51/100): Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner.