Simple Notification

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:appsbd:simple_notification:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAppsbd (12e76fbc-009b-5ef4-80e1-4b436e4542de)
ProductSimple Notification (106d0e80-650c-5121-804e-9a20ac9f44b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-54242 vulnerable 2026-06-08 06:54:16.231513 WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.
Published: 2024-12-13T14:24:35.775Z
Updated: 2026-05-11T22:22:49.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13866 vulnerable 2026-06-08 06:25:38.655783 Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Published: 2025-03-05T08:21:57.003Z
Updated: 2026-04-08T17:30:31.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.