Plugin icon

OneSignal – Web Push Notifications

onesignal-free-web-push-notifications

Vulnerabilities:

2

Last Updated:

January 22, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2025-12-15
Title
OneSignal – Web Push Notifications < 3.6.2 - Missing Authorization to Unauthenticated Plugin Settings Update
Fixed in
Fixed in 3.6.2
CVSS
5.3 (medium)
Published
2019-07-18
Title
OneSignal Web Push Notifications - Stored XSS
Fixed in
Fixed in 1.17.8
CVSS
5.4 (medium)