OneSignal – Web Push Notifications

OneSignal Push Notifications

Developer

3.8.1

Latest version

70,000

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

2 patched

0 Mitigation rules

WordPress OneSignal - Web Push Notifications plugin <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Post Meta Deletion via 'post_id' vulnerability
<= 3.8.0
3 hours ago
Missing Authorization to Unauthenticated Plugin Settings Update vulnerability
<= 3.6.1
15/12/2025