Read the docs

Pnfpb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pnfpb records in CISA KEV

No Pnfpb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Push Notification For Post And Buddypress 1 record HIGH

Records

1 record in Push Notification For Post And Buddypress · all components

TI-2024-05708 CVE-2024-6159 · GHSA-w589-4j7g-6889

Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi

Priority HIGH 82

The Push Notification for Post and BuddyPress WordPress plugin before 1.9.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, lead…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02789 Published 2025-05-15 Fixed in 1.9.4 CWE-89
Open these records in search →