‹ Back to list

Adwised

Adwised WEB Push Notification: vulnerabilities and CVEs

Adwised WEB Push Notification has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-87762High (8.8)0.36%—Oct 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where…
CVE-2026-87761High (8)0.28%—Oct 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1059.007 JavaScript2
  2. T1189 Drive-by Compromise2

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.