Onesignal – Web Push Notifications vulnerabilities
- onesignal – web push notificationsOneSignal – Web Push Notifications <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Post Meta Deletion via 'post_id'3.1 Low
- onesignal – web push notificationsOneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings Update5.3 Medium