Vulnerabilities in gtlwpdev
4 resultsCVE-2025-25092HIGHWordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-0816MEDIUMAll push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' ParameterEPSS 0.3%CVE-2025-32547HIGHWordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2025-32546HIGHWordPress All push notification for WP Plugin <= 1.5.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%