Pushnews Security & Risk Analysis

wordpress.org/plugins/pushnews

Increase your website traffic with Pushnews Web Push Notifications.

100 active installs v3.13.0 PHP 5.3+ WP 3.8+ Updated Unknown
notificationspushpush-notificationspushnewsweb-push
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Pushnews Safe to Use in 2026?

Generally Safe

Score 100/100

Pushnews has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The pushnews plugin version 3.13.0 presents a generally positive security posture based on the provided static analysis. The absence of any discovered CVEs and the plugin's clean vulnerability history are strong indicators of good security practices over time. The code analysis reveals no dangerous functions, SQL injection vulnerabilities (all queries use prepared statements), or exploitable taint flows. Furthermore, the attack surface is effectively zero, with no exposed AJAX handlers, REST API routes, shortcodes, or cron events that are unprotected by authentication or permission checks.

Key Concerns

  • Low output escaping coverage
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

Pushnews Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Pushnews Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
21
8 escaped
Nonce Checks
0
Capability Checks
0
File Operations
3
External Requests
3
Bundled Libraries
0

Output Escaping

28% escaped29 total outputs
Attack Surface

Pushnews Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 12
actionadmin_menuclass.pushnews.php:77
actionadmin_initclass.pushnews.php:78
actionadmin_enqueue_scriptspushnews.php:39
actioninitpushnews.php:42
actionplugins_loadedpushnews.php:43
actionadmin_noticespushnews.php:44
actionwoocommerce_add_to_cartpushnews.php:47
actionwoocommerce_thankyoupushnews.php:48
actionwp_footerpushnews.php:56
actionadd_meta_boxespushnews.php:59
actionfuture_postpushnews.php:60
actionsave_postpushnews.php:61
Maintenance & Trust

Pushnews Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedUnknown
PHP min version5.3
Downloads16K

Community Trust

Rating84/100
Number of ratings5
Active installs100
Developer Profile

Pushnews Developer Profile

Pushnews

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Pushnews

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pushnews/pushnews-admin.css/wp-content/plugins/pushnews/pushnews-admin.js
Script Paths
https://cdn.pn.vg/push/pushnews-launcher.js
Version Parameters
pushnews/pushnews-admin.css?ver=pushnews/pushnews-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
pushnews-admin-style
Data Attributes
data-pn-plugin-urldata-pn-wp-plugin-version
FAQ

Frequently Asked Questions about Pushnews