Skip to content
OpenAdvisories
Critical · 9.9 CVE-2024-52408 EUVD-2024-45895GHSA-2592-p5m4-vcrw

WordPress Push Notifications for WordPress by PushAssist plugin <= 3.0.8 - Arbitrary File Upload vulnerability

Published Nov 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in pushassist Push Notifications for WordPress by PushAssist push-notification-for-wp-by-pushassist allows Upload a Web Shell to a Web Server.This issue affects Push Notifications for WordPress by PushAssist: from n/a through <= 3.0.8.

Affected products

VendorProductAffectedFixed
pushassist Push Notifications for WordPress by PushAssist ≤ 3.0.8 —

References