CVE-2024-54386: Pushmonkey Push Monkey Pro – Web Push Notifications And Woocommerce Abandoned Cart

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart: from n/a through <= 3.9.

Affected products

• Pushmonkey Push Monkey Pro – Web Push Notifications And Woocommerce Abandoned Cart: up to and including 3.9

Published 2024-12-16. Last modified 2026-06-17.