SALERT – Social Proof Notifications & Live Sales Popup

SALERT – Social Proof Notifications & Live Sales Popup has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for SALERT – Social Proof Notifications & Live Sales Popup has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Jonas Höbenreich. SALERT – Social Proof Notifications & Live Sales Popup is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all SALERT – Social Proof Notifications & Live Sales Popup vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-32118

SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
SALERT – Social Proof Notifications & Live Sales Popup banner
Latestv1.3.2

SALERT – Social Proof Notifications & Live Sales Popup

wpoperations

Author

wpoperations

3.9(16)
78/100
Last Updated
2026-09-24 (1mo ago)
Active Installs
8,000+
Downloads
179,968
Requires WP
0+
Requires PHP
0+
Tested up to
WP 7.1.3
Created
2018-08-13 (8y ago)

Salert is a lightweight sales notification plugin that shows “Someone just purchased…” popups to your visitors. Social proof like this builds trust, creates urgency and helps turn more store visitors into customers. Set it up in minutes: choose your position, colors and animation, see every change in the live preview, and save. No coding needed, and it works without WooCommerce, so you can use it on any WordPress site. Get the latest news and Pro features at WPoperation. Why use sales notification popups? Build trust – show that real people are buying from you. Create urgency – recent activity nudges hesitant visitors to act. Increase conversions – social proof is one of the most effective ways to boost sales. Free Features Sales notification popups for your visitors, with or without WooCommerce. Live preview of every design change in the settings screen. Choose where the popup appears on the screen. Custom names, countries, products, time period and “ago” text. Set the delay before the first popup, how long it stays, and the interval between popups. Customize background color, text color, width, padding and font size. Border, border radius and box shadow options. Image position and image style options (square or circle). Text transform and typography options. Popup entrance animations. Optional close button. Fully responsive and mobile friendly. Works with all major browsers. Translation ready. Lifetime free support and constant updates. Salert Pro Features Ready to take your social proof further? Upgrade to Salert Pro and unlock: Real-time sales notifications – display your actual WooCommerce orders as they happen. Add real WooCommerce products to your notifications. Popup with sound – grab attention with an audio alert. Analytics dashboard – track how many visitors click your notifications. Review Popup – Display user’s review of the product as a popup. Multiple modern templates – professional designs in one click. Trust badges – add credibility to every popup. Notification timer – control when notifications appear. Full multilingual support – works with WPML and Polylang. Fast and friendly premium support.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C