Vulnerabilities / Push Notification for Post and BuddyPress
Push Notification for Post and BuddyPress vulnerabilities
Advisories WPSec published for Push Notification for Post and BuddyPress. Other sources may list more. Its attack surface: Push Notification for Post and BuddyPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0752 | Push Notification for Post and BuddyPress <= 3.23 - Unauthenticated Insecure Direct Object Reference to Push Subscription Registration for Arbitrary Users via User ID Parameters | Medium 6.5 | 3.24 |
License: CC BY 4.0