Title: GGPush Web Push Author: swelltr Published: September 9, 2026 Last modified: September 9, 2026 --- Search plugins ![](https://ps.w.org/ggpush-web-push/assets/banner-772x250.png?rev=3688358) ![](https://ps.w.org/ggpush-web-push/assets/icon-256x256.png?rev=3688358) # GGPush Web Push By [swelltr](https://profiles.wordpress.org/swelltr/) [Download](https://downloads.wordpress.org/plugin/ggpush-web-push.1.0.0.zip) * [Details](https://wordpress.org/plugins/ggpush-web-push/#description) * [Reviews](https://wordpress.org/plugins/ggpush-web-push/#reviews) * [Installation](https://wordpress.org/plugins/ggpush-web-push/#installation) * [Development](https://wordpress.org/plugins/ggpush-web-push/#developers) [Support](https://wordpress.org/support/plugin/ggpush-web-push/) ## Description GGPush Web Push adds browser push notifications to WordPress without requiring a separate push-notification SaaS account. The plugin generates VAPID keys on your server, stores browser subscriptions in your WordPress database, and sends encrypted Web Push messages directly from your WordPress server to each subscriber’s browser push service. Features include: * Modern non-modal subscription panel and animated notification launcher. * Mobile-friendly compact subscription experience. * The launcher is hidden for users who already have an active push subscription. * Automatic VAPID key generation. * Manual push notifications from the WordPress admin area. * Optional automatic notifications when a new post is published. * Push button in the post editor for published posts. * Optional notification image from the WordPress Media Library. * Active subscriber, campaign, successful delivery, failure, click and CTR statistics. * Unique click counting per subscription and campaign. * Automatic removal of expired push endpoints after 404/410 responses. * HTTPS-only endpoint validation, SSRF protection and REST rate limiting. * VAPID private-key encryption at rest using AES-256-GCM when supported by the server. * No bundled third-party JavaScript or PHP framework. #### External services and privacy Web Push requires communication with the push service selected by the visitor’s browser. Depending on the browser and operating system, this may be a service operated by Google, Mozilla, Apple, Microsoft, or another browser/platform provider. The plugin does not contact these services merely because it is installed. A visitor must explicitly click the notification opt-in control and grant browser notification permission before a push subscription is stored. When a site administrator sends a notification, the WordPress server sends the encrypted notification payload to the push endpoint supplied by that visitor’s browser. Data involved in Web Push can include the browser-provided push endpoint, public subscription encryption keys, encrypted notification content, and VAPID authentication data. The plugin stores subscriptions and campaign/click statistics in the site’s own WordPress database. It does not send analytics or telemetry to the plugin author. Browser push services are third-party services and are governed by the terms and privacy policies of the visitor’s browser/platform provider. Site owners should describe their use of browser notifications in their own privacy policy where required by applicable law. #### Security GGPush Web Push includes request-size limits, REST rate limits, same-origin checks, strict Web Push key validation, HTTPS-only endpoint validation, public-IP/DNS validation for outbound push endpoints, `wp_safe_remote_post()` for push delivery, dedicated notification capabilities, signed click tokens and scheduled stale-data cleanup. No software can be guaranteed vulnerability-free. Keep WordPress, PHP and server packages updated and maintain tested backups. ## Screenshots [[ [[ [[ ## Installation 1. Upload the plugin ZIP through **Plugins > Add New > Upload Plugin**, or install it from the WordPress Plugin Directory after approval. 2. Activate **GGPush Web Push**. 3. Make sure the site is served over HTTPS. 4. Open **Web Push** in the WordPress admin menu. 5. Confirm that HTTPS, OpenSSL and the automatically generated VAPID key show as ready. 6. Configure the subscription panel delay and optional automatic notifications. 7. Test subscription and delivery in a supported browser. ## FAQ ### Does this require an external push-notification account? No. The plugin does not require a separate SaaS account. Browser push delivery still uses the push service associated with each visitor’s browser, which is part of the Web Push architecture. ### Does the plugin require HTTPS? Yes. Browsers require secure contexts for Web Push, with limited development exceptions such as localhost. ### Does it use Composer on my production site? No. The distributed plugin does not require a Composer install or an external PHP package at runtime. ### What does “successful delivery” mean? It means the browser push service accepted the request. It does not guarantee that the device ultimately displayed the notification to the user. ### Are clicks counted more than once? Click statistics are deduplicated per subscription and campaign by a signed token and a unique database record. ### Why can an active subscriber disappear? If a push service reports an endpoint as expired or gone with HTTP 404/410, the plugin removes that invalid subscription automatically. ### Does the plugin send telemetry to the author? No. The plugin does not send usage analytics, subscriber data or telemetry to the plugin author. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “GGPush Web Push” is open source software. The following people have contributed to this plugin. Contributors * [ swelltr ](https://profiles.wordpress.org/swelltr/) [Translate “GGPush Web Push” into your language.](https://translate.wordpress.org/projects/wp-plugins/ggpush-web-push) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/ggpush-web-push/), check out the [SVN repository](https://plugins.svn.wordpress.org/ggpush-web-push/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/ggpush-web-push/) by [RSS](https://plugins.trac.wordpress.org/log/ggpush-web-push/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial public release based on the hardened, production-tested GGPush codebase. * Self-hosted Web Push delivery with automatic VAPID keys. * Modern non-modal subscription panel and animated launcher. * Manual, automatic and post-editor notification sending. * Delivery, failure, unique click and CTR statistics. * Hardened endpoint validation, rate limiting, signed click tracking and encrypted VAPID private-key storage. ## Meta * Version **1.0.0** * Last updated **1 day ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1** * PHP version ** 8.0 or higher ** * Tags * [alerts](https://wordpress.org/plugins/tags/alerts/)[browser notifications.](https://wordpress.org/plugins/tags/browser-notifications/) [Notifications](https://wordpress.org/plugins/tags/notifications/)[push notifications](https://wordpress.org/plugins/tags/push-notifications/) [web push](https://wordpress.org/plugins/tags/web-push/) * [Advanced View](https://wordpress.org/plugins/ggpush-web-push/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/ggpush-web-push/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/ggpush-web-push/reviews/) ## Contributors * [ swelltr ](https://profiles.wordpress.org/swelltr/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/ggpush-web-push/)