SALERT – Social Proof Notifications & Live Sales Popup
SALERT – Social Proof Notifications & Live Sales Popup has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for SALERT – Social Proof Notifications & Live Sales Popup has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Jonas Höbenreich. SALERT – Social Proof Notifications & Live Sales Popup is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2023-32118SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

SALERT – Social Proof Notifications & Live Sales Popup
Author
wpoperations
Salert is a lightweight sales notification plugin that shows “Someone just purchased…” popups to your visitors. Social proof like this builds trust, creates urgency and helps turn more store visitors into customers. Set it up in minutes: choose your position, colors and animation, see every change in the live preview, and save. No coding needed, and it works without WooCommerce, so you can use it on any WordPress site. Get the latest news and Pro features at WPoperation. Why use sales notification popups? Build trust – show that real people are buying from you. Create urgency – recent activity nudges hesitant visitors to act. Increase conversions – social proof is one of the most effective ways to boost sales. Free Features Sales notification popups for your visitors, with or without WooCommerce. Live preview of every design change in the settings screen. Choose where the popup appears on the screen. Custom names, countries, products, time period and “ago” text. Set the delay before the first popup, how long it stays, and the interval between popups. Customize background color, text color, width, padding and font size. Border, border radius and box shadow options. Image position and image style options (square or circle). Text transform and typography options. Popup entrance animations. Optional close button. Fully responsive and mobile friendly. Works with all major browsers. Translation ready. Lifetime free support and constant updates. Salert Pro Features Ready to take your social proof further? Upgrade to Salert Pro and unlock: Real-time sales notifications – display your actual WooCommerce orders as they happen. Add real WooCommerce products to your notifications. Popup with sound – grab attention with an audio alert. Analytics dashboard – track how many visitors click your notifications. Review Popup – Display user’s review of the product as a popup. Multiple modern templates – professional designs in one click. Trust badges – add credibility to every popup. Notification timer – control when notifications appear. Full multilingual support – works with WPML and Polylang. Fast and friendly premium support.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C