Mozilla Web Push vulnerabilities

• marco castelluccio web push WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability CVE-2025-23720 7.1 HighJanuary 16, 2025