PWA — easy way to Progressive Web App

PWA — easy way to Progressive Web App has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for PWA — easy way to Progressive Web App has a vendor fix available, so running the current release closes it.

All of these findings were reported by Francesco Carlucci. PWA — easy way to Progressive Web App is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all PWA — easy way to Progressive Web App vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-8967

PWA — easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Read the full analysis

Vulnerability Records

1 records
PWA — easy way to Progressive Web App banner
Latestv1.8.0

PWA — easy way to Progressive Web App

iworks (Marcin Pietrzak)

Author

iworks (Marcin Pietrzak)

4.8(26)
96/100
Last Updated
2026-07-20 (2mo ago)
Active Installs
1,000+
Downloads
61,345
Requires WP
6.0+
Requires PHP
8.0+
Tested up to
WP 7.0.4
Created
2021-03-18 (6y ago)

Progressive Web Apps (PWA) is a technology that combines the best of mobile web and the best of mobile apps to create a superior mobile web experience. They are installed on the phone like a normal app (web app) and can be accessed from the home screen. Users can come back to your website by launching the app from their home screen and interact with your website through an app-like interface. Your return visitors will experience almost-instant loading times and enjoy the great performance benefits of your PWA! iWorks PWA makes it easy for you to convert your WordPress website into a Progressive Web App instantly! Once this plugin is installed, users browsing your website from a supported mobile device will see a “Add To Home Screen” notice (from the bottom of the screen) and will be able to ‘install your website’ on the home screen of their device. iWorks PWA allow to add shortcuts for context menu to be displayed by the operating system when a user engages with the web app’s icon. iWorks PWA is easy to configure, it takes less than a minute to set-up your Progressive Web App! See room for improvement? Great! There are several ways you can get involved to help make PWA — easy way to Progressive Web App better: Report Bugs: If you find a bug, error or other problem, please report it! You can do this by creating a new topic in the plugin forum. Once a developer can verify the bug by reproducing it, they will create an official bug report in GitHub where the bug will be worked on. Suggest New Features: Have an awesome idea? Please share it! Simply create a new topic in the plugin forum to express your thoughts on why the feature should be included and get a discussion going around your idea. Issue Pull Requests: If you’re a developer, the easiest way to get involved is to help out on issues already reported in GitHub. Be sure to check out the contributing guide for developers. Thank you for wanting to make PWA — easy way to Progressive Web App better for everyone! The “PWA — easy way to Progressive Web App” plugin is available also on GitHub.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C