Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: SuperPWA Clear all filters
TI-2026-04459 CVE-2026-5108 · GHSA-p46p-m4cq-5fh8

Cross-site scripting in SuperPWA Super Progressive Web Apps

Priority LOW 20

The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and including, 2.2.43.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00311 Published 2026-08-05 No fix listed CWE-79
TI-2023-26140 CVE-2023-48277 · GHSA-9x39-vc5c-rcvv

WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps:…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00609 Published 2024-12-09 No fix listed CWE-862