App Builder – Create Native Android & iOS Apps On The Flight Security & Risk Analysis

wordpress.org/plugins/app-builder

The most advanced drag & drop app builder. Create multi templates and app controls.

600 active installs v5.7.0 PHP 7.4+ WP 5.6+ Updated Jun 26, 2026
app-builderwoocommerce-appfluttermobile-buildernews-app
47
D · High Risk
CVEs total7
Unpatched2
Last CVEMay 1, 2026
Safety Verdict

Is App Builder – Create Native Android & iOS Apps On The Flight Safe to Use in 2026?

High Risk

Score 47/100

App Builder – Create Native Android & iOS Apps On The Flight carries significant security risk with 7 known CVEs, 2 still unpatched. Consider switching to a maintained alternative.

7 known CVEs 2 unpatched Last CVE: May 1, 2026Updated 2mo ago
Risk Assessment
Assessment pending
Vulnerabilities
7 published

App Builder – Create Native Android & iOS Apps On The Flight Security Vulnerabilities

CVEs by Year

4 CVEs in 2024
2024
1 CVE in 2025
2025
2 CVEs in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

High
1
Medium
6

7 total CVEs

CVE-2026-7638medium · 5.3Authorization Bypass Through User-Controlled Key

App Builder <= 5.5.10 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter

May 1, 2026Unpatched
CVE-2026-2375medium · 6.5Improper Privilege Management

App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 - Unauthenticated Privilege Escalation via 'role' Parameter

Mar 20, 2026Unpatched
CVE-2025-49989medium · 5.3Missing Authorization

App Builder <= 5.5.7 - Missing Authorization

Jun 19, 2025 Patched in 5.5.8 (174d)
CVE-2024-9302high · 8.1Weak Password Recovery Mechanism for Forgotten Password

App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTP

Oct 24, 2024 Patched in 5.3.8 (1d)
CVE-2024-7651medium · 5.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

App Builder – Create Native Android & iOS Apps On The Flight <= 4.3.3 - Unauthenticated Limited SQL Injection via app-builder-search

Aug 20, 2024 Patched in 4.3.4 (3d)
CVE-2024-32565medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

App Builder <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Apr 16, 2024 Patched in 3.8.9 (192d)
CVE-2024-31282medium · 5.4URL Redirection to Untrusted Site ('Open Redirect')

App Builder <= 3.8.7 - Open Redirection

Apr 5, 2024 Patched in 3.8.8 (7d)
Maintenance & Trust

App Builder – Create Native Android & iOS Apps On The Flight Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedJun 26, 2026
PHP min version7.4
Downloads67K

Community Trust

Rating78/100
Number of ratings8
Active installs600
Developer Profile

App Builder – Create Native Android & iOS Apps On The Flight Developer Profile

App Cheap

2 plugins · 1K total installs

60
trust score
Avg Security Score
73/100
Avg Patch Time
98 days
View full developer profile
FAQ

Frequently Asked Questions about App Builder – Create Native Android & iOS Apps On The Flight