Web Push Notifications
Approved changes feed: RSS · Atom
cpe:2.3:a:feedify:web_push_notifications:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Feedify (abc75d09-ad2e-5b18-8b53-933137e7b294) |
|---|---|
| Product | Web Push Notifications (d5771b07-740f-58c5-950d-9fa162807c3a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-13874 |
vulnerable | 2026-06-08 06:25:38.674842 |
Feedify – Web Push Notifications < 2.4.6 - Reflected XSS
The Feedify WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2025-04-10T06:00:05.480Z
Updated: 2025-04-10T18:19:07.234Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38352 |
vulnerable | 2026-06-08 05:32:55.949559 |
Feedify – Web Push Notifications <= 2.1.8 Reflected Cross-Site Scripting
MEDIUM (6.1)
The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_msg parameter found in the ~/includes/base.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.8.
Published: 2021-09-10T13:33:12.312Z
Updated: 2025-05-02T20:14:13.345Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.