Super Progressive Web Apps
Approved changes feed: RSS · Atom
cpe:2.3:a:superpwa:super_progressive_web_apps:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Superpwa (3f82d8e5-4548-5ac5-87bc-8132f1156eae) |
|---|---|
| Product | Super Progressive Web Apps (33a9f0c7-5274-58d7-a26e-2c509f19993f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5108 |
vulnerable | 2026-09-16 04:33:52.609486 |
Super Progressive Web Apps <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting via Offline Message Setting
MEDIUM (4.4)
The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and including, 2.2.43. This is due to insufficient input sanitization and output escaping. The offline message value is stored without sanitization, passed to the frontend via `wp_localize_script()` without escaping, and rendered using `innerHTML` in the JavaScript snackbar component. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user triggers the offline snackbar.
Published: 2026-08-05T06:37:53.144Z
Updated: 2026-08-05T14:27:19.325Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48277 |
vulnerable | 2026-06-08 06:14:26.791741 |
WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.
Published: 2024-12-09T11:39:26.619Z
Updated: 2026-05-11T22:21:04.314Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.