WordPress plugin
Push Notification for Post and BuddyPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium5
- Low0
All Push Notification for Post and BuddyPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤3.23Update to 3.24 | CVE-2026-107417 | |
| Medium4.3 | Missing Authorization ≤3.20Update to 3.21 | CVE-2026-81279 | |
| Medium5.3 | Missing Authorization to Unauthenticated Settings Update ≤2.11Update to 2.12 | CVE-2025-23771 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.06Update to 2.08 | CVE-2024-12407 | |
| Critical10.0 | Unauthenticated SQL Injection ≤1.93Update to 1.94 | CVE-2024-6159 | |
| Medium5.3 | Missing Authorization to Unauthenticated Admin Notice Dismissal <1.64Update to 1.64 | — |
- Medium5.3Missing Authorization
≤3.23Update to 3.24
- Medium4.3Missing Authorization
≤3.20Update to 3.21
- Medium5.3Missing Authorization to Unauthenticated Settings Update
≤2.11Update to 2.12
- Medium6.1Reflected Cross-Site Scripting
≤2.06Update to 2.08
- Critical10.0Unauthenticated SQL Injection
≤1.93Update to 1.94
- Medium5.3Missing Authorization to Unauthenticated Admin Notice Dismissal
<1.64Update to 1.64
Push Notification for Post and BuddyPress: common questions
Does Push Notification for Post and BuddyPress have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Push Notification for Post and BuddyPress: 1 critical, 5 medium. None are known to affect version null.
How do I check which version of Push Notification for Post and BuddyPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Push Notification for Post and BuddyPress vulnerability?
CVE-2026-107417, published Oct 12, 2026: Push Notification for Post and BuddyPress <= 3.23 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Push Notification for Post and BuddyPress vulnerability listed in CISA KEV?
No. None of the known Push Notification for Post and BuddyPress vulnerabilities is currently listed in the CISA KEV catalog.