SALERT – Fake Sales Notification WooCommerce

SALERT – Fake Sales Notification WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for SALERT – Fake Sales Notification WooCommerce has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Jonas Höbenreich. SALERT – Fake Sales Notification WooCommerce is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SALERT – Fake Sales Notification WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-32118

SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2023-05-09 00:00	SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting SALERT <= 1.2.1	`CVE-2023-32118`	6.4 Medium	Jonas Höbenreich	Yes
2023-05-09 00:00	SALERT <= 1.2.1 - Missing Authorization via salert_save_settings_with_ajax() SALERT <= 1.2.1	`CVE-2023-32126`	4.3 Medium	Jonas Höbenreich	Yes

Showing 1–2 of 2 reports

Latestv1.3.1

SALERT – Fake Sales Notification WooCommerce

Author

wpoperations

3.9(16)

78/100

Last Updated

2026-05-24 (4mo ago)

Active Installs

8,000+

Downloads

176,414

Requires WP

Requires PHP

Tested up to

WP 7.0.4

Created

2018-08-13 (8y ago)

Salert is a plugin for sales notification to the customers. It also has feature to generate fake sales notification to engage your visitors. The plugin has full control with many customization options. This is an effective marketing tool designed to increase the conversion of site visitors into customers. It uses cutting edge technologies to provide the smoother user experience.This plugins can generate notification without WooCommerce plugin. Features Create fake sales notification to visitors. Customize notification box color, size, font color, font size etc. Define position to display notification on the screen. Live preview changes. Background options. Typography options. Animation Options. Translation Ready. Lifetime Free support. Constant updates.

View on WordPress.org