Push Notifications

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pushassist:push_notifications:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPushassist (63703837-f42c-5720-be4a-1f0f1b7daba0)
ProductPush Notifications (ebc32b79-e360-572a-9cf9-46c6551a3dfd)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/pushassist/web-push-notifications purl2cpe 2026-06-01 10:11:03.252384
pkg:github/pushassist/web-push-notifications purl2cpe 2026-06-01 10:11:03.252388

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52408 vulnerable 2026-06-08 06:52:15.095499 WordPress Push Notifications for WordPress by PushAssist plugin <= 3.0.8 - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in pushassist Push Notifications for WordPress by PushAssist push-notification-for-wp-by-pushassist allows Upload a Web Shell to a Web Server.This issue affects Push Notifications for WordPress by PushAssist: from n/a through <= 3.0.8.
Published: 2024-11-16T21:44:42.442Z
Updated: 2026-04-28T16:10:41.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0644 vulnerable 2026-06-08 05:52:32.164248 PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2023-05-15T12:15:40.717Z
Updated: 2025-01-14T18:21:36.964Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.