Lucene search
+L

CVE-2024-1698 NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

🗓️ 27 Feb 2024 05:33:12Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 59 Views

The WordPress NotificationX plugin (up to v2.8.2) is vulnerable to unauthenticated SQL Injection via the 'type' parameter, allowing attackers to extract sensitive information from the database

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for SQL Injection in Wpdeveloper Notificationx
4 Jun 202606:12
–githubexploit
githubexploit
GithubExploit
Exploit for SQL Injection in Wpdeveloper Notificationx
29 Mar 202404:11
–githubexploit
bdu_fstec
BDU FSTEC
NotificationX Plugin SQLi
10 Jun 202400:00
–bdu_fstec
circl
Circl
CVE-2024-1698
27 Feb 202407:26
–circl
cnnvd
CNNVD
WordPress Plugin NotificationX Security Vulnerability
27 Feb 202400:00
–cnnvd
cve
CVE
CVE-2024-1698
27 Feb 202405:33
–cve
kitploit
Kitploit
CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction
25 Oct 202601:06
–kitploit
kitploit
Kitploit
WordPress-NotificationX-CVE-2024-1698
24 Oct 202623:39
–kitploit
kitploit
Kitploit
CVE-2024-1698-Exploit
24 Oct 202619:31
–kitploit
kitploit
Kitploit
CVE-2024-1698
24 Oct 202606:34
–kitploit
Rows per page
[
  {
    "vendor": "wpdevteam",
    "product": "NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

08 Apr 2026 17:28Current
9.8Critical risk
Vulners AI Score9.8
CVSS 3.19.8
EPSS0.77585
SSVC
59