What’s Vulnerable › Products

Marco Castelluccio Web Push vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Marco Castelluccio Web Push version is affected

Latest Marco Castelluccio Web Push vulnerabilities

• CVE-2025-23720 — WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability (CVSS 7.1)