VULNERABILITY INTELLIGENCE

CVE-2023-0644

CVSS score6.1 MEDIUM

EPSS probability0.54%

CISA KEVNot currently listed

Published2023-05-15

Last modified2026-06-17

Description

The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.