Skip to content
OpenAdvisories

Vendor

Webpushr Web Push Notifications

2 known vulnerabilities.

Products

Web Push Notifications – Webpushr 1 Webpushr 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2024-34369

    WordPress Web Push Notifications – Webpushr plugin <= 4.35.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webpushr Web Push Notifications Webpushr allows Reflected XSS.This issue affects Webpushr: from n/a through 4.35.0.

    Webpushr Web Push Notifications Webpushr
  • High 8.8
    CVE-2023-35041

    WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin <= 4.34.0 versions.

    Webpushr Web Push Notifications Web Push Notifications – Webpushr