← Back

Web Push Notifications

web_push_notifications

Vendor: Feedify • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-13874
1Feedify
1Web Push Notifications
Jun 17, 2026
Apr 10, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
The Feedify WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such...Show more
The Feedify WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less
CVE-2021-38352
1Feedify
1Web Push Notifications
Jun 17, 2026
Sep 10, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_msg parameter found in the ~/includes/base.php file which allows attackers to inject arbitrary web scr...Show more
The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_msg parameter found in the ~/includes/base.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.8.Show less