webpushr

Products

ProductCVEsExploitedLatest
Web Push Notifications – Webpushr1–Jul 23, 2026
Webpushr1–Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-9729 Medium 6.4 Web Push Notifications <= 4.39.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'webpushr_notification_title' Post Meta Parameter 0.3%
  • CVE-2026-24536 Medium 5.3 WordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability 0.3%