Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-119490 EUVD-2026-119101GHSA-25wx-2cq4-9r54

WordPress Better Notifications for WP plugin <= 1.10.1 - Content Injection vulnerability

Published Nov 7, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Made with Fuel Ltd. Better Notifications for WP bnfw allows Code Injection.This issue affects Better Notifications for WP: from n/a through 1.10.1.

Affected products

VendorProductAffectedFixed
Made with Fuel Better Notifications for WP ≤ 1.10.1 —

References