Vulnerabilities and security researches forultimate-push-notifications ultimate-push-notifications
Direction: descendingJul 19, 2025
Ultimate Push Notifications ( Mobile / Desktop ), Receive Notification From WooCommerce, BuddyPress, WordPress Default Events & # CVE-2025-50028
- CVE, Research URL
- Date
- Jul 16, 2025
- Research Description
- Missing Authorization vulnerability in CodeSolz Ultimate Push Notifications allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Push Notifications: from n/a through 1.1.9.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Apr 03, 2025
Ultimate Push Notifications ( Mobile / Desktop ), Receive Notification From WooCommerce, BuddyPress, WordPress Default Events & # CVE-2025-31561
- CVE, Research URL
- Date
- Apr 02, 2025
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in M. Tuhin Ultimate Push Notifications allows SQL Injection. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Ultimate Push Notifications ( Mobile / Desktop ), Receive Notification From WooCommerce, BuddyPress, WordPress Default Events & # CVE-2025-31548
- CVE, Research URL
- Date
- Apr 02, 2025
- Research Description
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M. Tuhin Ultimate Push Notifications allows Reflected XSS. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable