Web Push Notifications Security Vulnerabilities and Issues — Web Push Notifications CVE List

WebpushrWeb Push Notifications

2 matches found

CVE•added 2023/11/27 4:22 p.m.•72 views

CVE-2023-5620

CVE-2023-5620 concerns Web Push Notifications (Webpushr) for WordPress, pre-4.35.0. The vulnerability is an unauthenticated Stored XSS due to insufficient protection when visitors can alter plugin settings, enabling an attacker to inject scripts via settings like price_drop_icon. The Red Hat/patc...

5.4CVSS5.6AI score0.00426EPSS

SaveWeb

CVE•added 2023/11/13 2:12 a.m.•56 views

CVE-2023-35041

CVE-2023-35041 affects the WordPress plugin Webpushr Web Push Notifications (Webpushr) version

8.8CVSS8.8AI score0.00316EPSS

Save