Vulnerabilities and security researches formobile-pages mobile-pages

Apr 15, 2025

CVE, Research URL: CVE-2025-32625
Home page URL: Security reports for Mobile Blocks
Application: Mobile Blocks
Date: Apr 17, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Mobile Pages allows Reflected XSS. This issue affects Mobile Pages: from n/a through 1.0.2.
Affected versions: max 1.0.2.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: 4c03e8b6a308d4075dcaff92254eb1b92883a47f
Home page URL: Security reports for Mobile Blocks
Application: Mobile Blocks
Date: Feb 28, 2022
Research Description: Mobile Blocks [mobile-pages] <= 1.0.2 (unfixed) WordPress Mobile Pages plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Mobile Pages plugin (versions <= 1.0.0).
Affected versions: max 1.0.2.
Status: vulnerable