Skip to content
OpenAdvisories

Product · Appsbd

Simple Notification

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-13866

    Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administra…

    Appsbd Simple Notification Web / CMS
  • Medium 6.5
    CVE-2024-54242

    WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.

    Appsbd Simple Notification