Read the docs

gtlwpdev

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

gtlwpdev records in CISA KEV

No gtlwpdev vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-18761 CVE-2025-25092 · GHSA-94w6-49r3-prpm

WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notificat…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2025-03-03 No fix listed CWE-79
TI-2025-23611 CVE-2025-32546 · GHSA-hm48-f7vp-c97r

WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through <= 1.5.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00152 Published 2025-04-17 No fix listed CWE-352
TI-2026-00598 CVE-2026-0816 · GHSA-h73v-23vf-mfm4

All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

Priority LOW 23

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'delete_id' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00376 Published 2026-02-04 No fix listed CWE-89
Open these records in search →