appsbd Simple Notification vulnerabilities

Latest appsbd Simple Notification CVEs

Newest publication first

1. CVE-2024-13866 Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

   Published 2025-03-05

   Medium·CVSS 6.4 EPSS 0.24%

   The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to...

2. CVE-2024-54242 WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability

   Published 2024-12-13

   Medium·CVSS 6.5 EPSS 0.36%

   Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.