Medium · 6.5 CVE-2024-54241 EUVD-2024-52367GHSA-p83f-5g8v-2prf

WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Appsbd Product: Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification Category: Web / CMS

Description

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification: from 1.5 through n/a.

Affected products

Vendor	Product	Affected	Fixed
Appsbd	Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification	1.5	—

References

https://patchstack.com/database/wordpress/plugin/elite-notification/vulnerability/wordpress-elite-notification-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry