← All advisories

Medium severity5.4NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2019-15827

CVE-2019-15827

Description

The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/onesignal-free-web-push-notifications plugindescription
OneSignal/Onesignal Free Web Push Notifications
cpe:2.3:a:onesignal:onesignal-free-web-push-notifications:1.17.5:*:*:*:*:wordpress:*:*
WordPress/Onesignal Free Web Push Notificationsllm-fuzzy
Range: <1.17.8
Package: https://wordpress.org/plugins/onesignal-free-web-push-notifications

Patches

Vulnerability mechanics

References

3

www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5530.phpnvdExploitThird Party Advisory
wordpress.org/plugins/onesignal-free-web-push-notifications/nvdProductThird Party Advisory
wpvulndb.com/vulnerabilities/9478nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.