SmartPush – Free Web Push Notifications Security & Risk Analysis

wordpress.org/plugins/smartpush-web-push-notifications

Web push notifications for your website. Available in Chrome & Firefox (desktop) with support for Android and Safari coming soon.

10 active installs v1.0.3 PHP + WP 4.6+ Updated Feb 11, 2022
notificationssubscribesubscribersweb-pushweb-push-notifications
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SmartPush – Free Web Push Notifications Safe to Use in 2026?

Generally Safe

Score 85/100

SmartPush – Free Web Push Notifications has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The "smartpush-web-push-notifications" v1.0.3 plugin exhibits a strong security posture in several key areas, demonstrating good development practices. The static analysis reveals a complete absence of direct attack surface points like unprotected AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, the code signals indicate no dangerous functions are used, all SQL queries are properly prepared, and there are no file operations or external HTTP requests, which are common vectors for vulnerabilities. The lack of any recorded vulnerability history, including CVEs, further reinforces this impression of a well-secured plugin.

Key Concerns

  • Output escaping is missing
  • No capability checks for entry points
  • No nonce checks for entry points
Vulnerabilities
None known

SmartPush – Free Web Push Notifications Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SmartPush – Free Web Push Notifications Release Timeline

v1.0.3Current
v1.0.2
v1.0.0
Code Analysis
Analyzed Mar 17, 2026

SmartPush – Free Web Push Notifications Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped4 total outputs
Attack Surface

SmartPush – Free Web Push Notifications Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actioninitsmartpush-web-push-notifications.php:32
actionwp_headsmartpush-web-push-notifications.php:33
actionwp_footersmartpush-web-push-notifications.php:34
filterquery_varssmartpush-web-push-notifications.php:35
actionparse_requestsmartpush-web-push-notifications.php:36
actionwp_footersmartpush-web-push-notifications.php:82
actionadmin_menusmartpush-web-push-notifications.php:151
actionadmin_initsmartpush-web-push-notifications.php:152
actionadmin_noticessmartpush-web-push-notifications.php:153
actionadmin_print_stylessmartpush-web-push-notifications.php:154
actionadmin_print_scriptssmartpush-web-push-notifications.php:155
Maintenance & Trust

SmartPush – Free Web Push Notifications Maintenance & Trust

Maintenance Signals

WordPress version tested5.9.13
Last updatedFeb 11, 2022
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

SmartPush – Free Web Push Notifications Developer Profile

SmartPush

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SmartPush – Free Web Push Notifications

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/smartpush-web-push-notifications/css/options-styles.css/wp-content/plugins/smartpush-web-push-notifications/js/options-scripts.js
Script Paths
https://cdn-static3.com/cdn/push.min.js
Version Parameters
smartpush-web-push-notifications/css/options-styles.css?ver=smartpush-web-push-notifications/js/options-scripts.js?ver=

HTML / DOM Fingerprints

JS Globals
WPush
REST Endpoints
/wp-json/smartpush-web-push-notifications
FAQ

Frequently Asked Questions about SmartPush – Free Web Push Notifications