Skip to content
OpenAdvisories
High · 7.5 CVE-2026-28153 EUVD-2026-64792GHSA-j465-f4q6-m46m

WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin <= 1.7.1 - Broken Access Control vulnerability

Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Patchstack

Vendor: Notification Master Product: Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More Category: Web / CMS

Description

Unauthenticated Broken Access Control in Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More <= 1.7.1 versions.

Affected products

VendorProductAffectedFixed
Notification Master Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More ≤ 1.7.1 —

References