Adwised Web Push Notification vulnerabilities
We track 2 vulnerabilities in Adwised Web Push Notification products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Adwised Web Push Notification vulnerabilities
- 8.8 High severity
Adwised Web Push Notification: Improper Neutralization of Input During Web Page Generation
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowi
- 8.0 High severity
Adwised Web Push Notification: Improper Neutralization of Input During Web Page Generation
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them