Ultimate Push Notifications

Explore Ultimate Push Notifications vulnerabilities across all versions. Currently tracking 3 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage0%
Open

3

Fixed

0

Get automatic notifications for all Ultimate Push Notifications vulnerabilities before they are exploited.

Vulnerability Records

3 records
Ultimate Push Notifications banner
Latestv1.3.0

Ultimate Push Notifications

CodeSolz

Author

CodeSolz

3.0(4)
60/100
Last Updated
2026-06-08 (2mo ago)
Active Installs
50+
Downloads
7,561
Requires WP
4.0+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2020-08-19 (6y ago)

Ultimate Push Notifications is the most complete, privacy-friendly push notification solution for WordPress websites. Powered by Firebase Cloud Messaging (FCM) SDK v11, it delivers real-time alerts directly to your visitors’ browsers — on desktop and mobile — even when they are not on your site. No SMS bills. No email list dependency. Just instant, reliable push notifications that actually reach people. Push notifications have 4x higher open rates than email. Keep your customers, community members, and team informed the moment something happens — for free. Why Choose Ultimate Push Notifications? Most push notification services charge a monthly fee per subscriber. This plugin uses Google Firebase (free tier is generous for most sites) and keeps everything under your control. Your subscriber data stays in your own database. You own your audience. Real Problems This Plugin Solves For WooCommerce Store Owners: You’re losing sales because customers have no idea their order shipped, their payment failed, or their order is ready. And your vendors have no idea someone just bought from them. This plugin fixes all of that — with instant push alerts for every order event. For BuddyPress / Community Sites: Your community members miss friend requests, new messages, group invites, and activity updates because they’re not watching their inbox. Push notifications bring them back the moment something happens — without email fatigue. For Site Administrators: You need to know the instant a form is submitted, a new user registers, or an event goes live. Real-time push notifications to your browser mean you’re always in the loop, even if your email is buried. For All Sites: Instead of paying for SMS alerts or high-volume email plans, this plugin lets you communicate in real time for free — using the same infrastructure Google uses for Android notifications. Key Features Firebase 11 — Always Current – Powered by Firebase Cloud Messaging (FCM) SDK version 11 compat – Supports VAPID keys (Web Push Certificate) for modern browser compatibility – Service Worker handles background notifications even when the browser is closed – Rich notifications: show images inside the push popup – Click-to-navigate: clicking a notification opens the right page automatically – Auto-cleanup: invalid / expired device tokens are removed automatically — no stale bloat Per-User Control – Users choose which notification types they want to receive — no spam – Users can customize the notification title and message text – BuddyPress members manage their preferences from their profile page – Zero tracking: no third-party analytics, no subscriber IDs sent anywhere WooCommerce — Complete Order Lifecycle – Seller alert when a product is sold (payment complete) – Seller alert when a product is added to cart – Buyer AND seller alert when order status changes (processing, shipped, complete, on-hold, etc.) – Supports multi-vendor platforms: Dokan, WCFM BuddyPress — Every Social Interaction – New message received – Friend request sent / accepted / rejected / cancelled – New activity post or status update published – Comment on a post or activity – New group invitation received – Group details updated – Custom activity post types: published, updated, deleted Contact Form 7 – Admin receives instant push notification when any CF7 form is submitted — never miss a lead WordPress Core – Admin notified the moment a new user registers The Events Calendar – Integration ready for event-based notifications Device & Subscriber Management – Each user’s devices are tracked individually – View all registered devices in the admin panel – Test notifications directly from the admin — verify delivery before going live – Notification log table tracks delivery history (success / failure counts per token) How It Works You create a free Firebase project at console.firebase.google.com Enter your Firebase config and VAPID key in the plugin’s App Config screen Users visit your site and click Allow on the browser permission prompt Their device is registered — push notifications start flowing instantly No app stores. No app to install. Works in Chrome, Firefox, Edge, Safari (with Web Push support), and most modern browsers. Security FCM server key is stored server-side only — never exposed to browser JavaScript All user inputs are sanitized through WordPress standards AJAX endpoints use nonce verification (SECURE_AUTH_SALT) Capability checks enforce admin-only access to sensitive settings VAPID key authentication ensures only your server can send notifications Requirements WordPress 5.0 or higher PHP 7.4 or higher SSL (HTTPS) required — browsers block push notification registration on non-secure sites A free Firebase account at console.firebase.google.com Firebase VAPID key (Web Push Certificate) from your Firebase project settings Multi-Device & Testing One user can register multiple browsers / devices For testing: use different browsers or incognito windows logged in as different users Use the Register My Device page to register your own device and test with one click Getting Started (Quick Setup) Install and activate the plugin Go to UPush Notifier → App Config Create a Firebase project and paste your config (apiKey, authDomain, projectId, etc.) Paste your VAPID Key (from Firebase Console → Project Settings → Cloud Messaging → Web Push certificates → Generate key pair) Paste your Server Key (from Firebase Console → Project Settings → Cloud Messaging → Legacy API section) Save the config Go to UPush Notifier → Register My Device and click Allow Send a test notification — you should receive it instantly Full step-by-step documentation: Create a Firebase Application Setup App Config Configure Notifications Register a Device Video Guides Notification Reference WooCommerce – {first_name} {last_name} {full_name} — customer name – {total} — order total with currency – {product_title} — product name – {price} — product price – {order_id} — order number – {status_from} {status_to} — order status transition BuddyPress – All standard BuddyPress activity and messaging events Forum & Support For support, feature requests, and bug reports: * Visit [codesolz.net](https://codesolz.net/?utm_source=wordpress.org&utm_medium=README&utm_campaign=ultimate-push-notifications) for instant support * Email: [support@codesolz.net](mailto:support@codesolz.net) * GitHub: [github.com/CodeSolz/ultimate-push-notifications](https://github.com/CodeSolz/ultimate-push-notifications) * Forum: [forum.codesolz.net](https://forum.codesolz.net/?utm_source=wordpress.org&utm_medium=README&utm_campaign=ultimate-push-notifications)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C