CVE-2024-52408: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in pushassist Push Notifications for WordPress by PushAssist push-notification-for-wp-by-pushassist allows Upload a Web Shell to a Web Server.This issue affects Push Notifications for WordPress by PushAssist: from n/a through = 3.0.8...

CVE-2023-0644: Undefined Security Weakness

The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2021-14290

Name of the Vulnerable Software and Affected Versions: Push Notifications for WordPress Lite versions prior to 6.0.1 Description: A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially...

CVE-2021-20846: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Push Notifications for WordPress Lite versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page...