Skip to content
OpenAdvisories

Vendor

superpwa

2 known vulnerabilities.

Products

Super Progressive Web Apps 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-5108

    Super Progressive Web Apps <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting via Offline Message Setting

    The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and including, 2.2.43. This is due to insufficient input sanitization and output e…

    superpwa Super Progressive Web Apps Web / CMS
  • Medium 4.3
    CVE-2023-48277

    WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.

    superpwa Super Progressive Web Apps