WordPress Web Push Notifications Vulnerabilities

Wordpress Web Push Notifications vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

15 December 2025

Unauthorized Data Modification in OneSignal Web Push Notifications Plugin for WordPress
CVE-2025-13950
WordPressOnesignal – Web Push N...5.3MEDIUM

9 December 2025

Access Control Vulnerability in Gravitec.net's Web Push Notifications Plugin
CVE-2025-62869
WordPressGravitec.net – W...4.3MEDIUM

5 September 2025

Cross-site Scripting Vulnerability in Pushe Web Push Notification by Pusheco
CVE-2025-58873
WordPressPushe Web Push Notific...5.9MEDIUM

16 May 2025

Missing Authorization in App Cheap Push Notification for Mobile and Web App
CVE-2025-48127
WordPressPush Notification For ...6.5MEDIUM

20 March 2025

Reflected Cross-Site Scripting in Passbeemedia Web Push Notification Plugin
CVE-2024-13877
WordPressPassbeemedia Web Push ...👾🟡7.1HIGH

16 December 2024

WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability
CVE-2024-54386
WordPressPush Monkey Pro – Web ...7.1HIGH

27 November 2023

Webpushr < 4.35.0 - Unauthenticated Stored XSS
CVE-2023-5620
WordpressWeb Push Notifications5.4MEDIUM

13 November 2023

WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35041
WordPressWeb Push Notifications...8.8HIGH

10 September 2021

Feedify – Web Push Notifications <= 2.1.8 Reflected Cross-Site Scripting
CVE-2021-38352
WordPressFeedify – Web Push Not...6.1MEDIUM

30 August 2019

Cross-Site Scripting Issue in OneSignal Free Web Push Notifications by WordPress
CVE-2019-15827
WordpressOnesignal-free-web-pus...5.4MEDIUM