Skip to content
OpenAdvisories

Vendor

onesignal

3 known vulnerabilities.

Products

OneSignal – Web Push Notifications 2 react-native-onesignal 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13950

    OneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings Update

    The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settings handling functionality in all versions up to, and including, 3.6.1. This is due to the plugin proc…

    onesignal OneSignal – Web Push Notifications Web / CMS