Webpushr vulnerabilities

Products

• Web Push Notifications 2
• Webpushr 2

Newest

• webpushr web push notifications – webpushr Web Push Notifications <= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr_notification_title' Post Meta Parameter CVE-2026-9729 6.4 MediumJuly 23, 2026
• webpushr WordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability CVE-2026-24536 5.3 MediumJanuary 23, 2026
• webpushr WordPress Web Push Notifications – Webpushr plugin <= 4.35.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34369 7.1 HighMay 6, 2024
• unknown web push notifications Webpushr < 4.35.0 - Unauthenticated Stored XSS CVE-2023-5620 5.4 MediumNovember 27, 2023
• webpushr web push notifications, webpushr web push notifications web push notifications – webpushr +1 more WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-35041 8.8 HighNovember 13, 2023