CVE-2024-52408: Pushassist Push Notifications

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in pushassist Push Notifications for WordPress by PushAssist push-notification-for-wp-by-pushassist allows Upload a Web Shell to a Web Server.This issue affects Push Notifications for WordPress by PushAssist: from n/a through <= 3.0.8.

Affected products

• Pushassist Push Notifications: up to and including 3.0.8
• Pushassist Push Notifications For WordPress By Pushassist: up to and including 3.0.8

Published 2024-11-16. Last modified 2026-06-17.