CVE-2026-107417

CVE-2026-107417 · WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through 3.23.

CVSS 6.5 · Moyenne · EPSS 0,2% · Correctif disponible

Publication: 2026-10-14T13:00:15.564Z
Mise à jour: 2026-10-15T16:43:47.561Z

Produits et versions concernés

push notification for post and buddypress
Versions du logiciel
- ≥ 0, ≤ 3.23: Concernée; ≥ 3.24: Non concernée (custom)
Mettez à jour vers 3.24

Sources originales

https://patchstack.com/database/wordpress/plugin/push-notification-for-post-and-buddypress/vulnerability/wordpress-push-notification-for-post-and-buddypress-plugin-3-23-broken-access-control-vulnerability?_s_id=cve
https://nvd.nist.gov/vuln/detail/CVE-2026-107417

Vérifiez votre serveur →

CVE-2026-107417 · WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability

Produits et versions concernés

push notification for post and buddypress

Sources originales