webpushr

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

webpushr records in CISA KEV

No webpushr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web Push Notifications 2 records MEDIUM

Records

2 records in Web Push Notifications · all components

TI-2023-17517 CVE-2023-35041 · GHSA-hhw6-675p-j8x7

WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin <= 4.34.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00379 Published 2023-11-13 No fix listed CWE-352

TI-2023-05172 CVE-2023-5620 · GHSA-vpf6-j6mv-p249

Webpushr < 4.35.0 - Unauthenticated Stored XSS

LOW 25

The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00426 Published 2023-11-27 Fixed in 4.35.0 CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0