← CVE Intelligence

CVE-2025-13029

Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion PUBLISHED

Description (CNA)

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users.

Affected (CNA)

Vendor / productVersions
Unknown / Knowband Mobile App Builderaffected 0 before 3.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.