Unknown Adwised Web Push Notification vulnerabilities

2 CVEs affecting Unknown Adwised Web Push Notification, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-87762, published 2026-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-87762, published 2026-10-11. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on…
CVE-2026-87761, published 2026-10-11. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and…