108 matches found
CVE-2024-1698-Exploit
Script de explotación para CVE-2024-1698 - Wordpress NotificationX = 2.8.2 - Inyección SQL Este es un script de explotación para averiguar el nombre de usuario y el hash de la contraseña del administrador de WordPress explotando CVE-2024-1698. Este script de Python tiene fines exclusivamente...
NotificationX Dropshipping < 4.4 - SQL Injection
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection id: CVE-2022-3481 info: name: NotificationX Dropshipping 4.4 - SQL Injection author: ritikchaddha severity: critical...
WordPress-NotificationX-CVE-2024-1698
Configuración docker-compose up --build Limpieza docker-compose down Pruebas Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where id=1,1,1=36,SLEEP10,null-- -'...
CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction
CVE-2024-1698 – NotificationX WordPress Plugin SQL Injection Time‑Based Blind Unauthenticated Time‑Based Blind SQL Injection → Extract admin username & password hash from WordPress. 🧠 Vulnerability Overview NotificationX versions 2.8.2 and below suffer from improper input sanitization in the type...
CVE-2019-1698
TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Day Started: 30/07/2024 Check the diff code betwween ver has vuln and ver of code with fix vuln: Code reference 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php Code reference...
NotificationX <= 2.8.2 - SQL Injection
The NotificationX - Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and la...
WordPress NotificationX <2.3.9 - SQL Injection
WordPress NotificationX plugin prior to 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape the nxid parameter before using it in a SQL statement, leading to an unauthenticated blind SQL injection. An attacker can possibly obtain sensitive information, modify dat...
CVE-2026-78563
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2026-78563
CVE-2026-78563 is marked as rejected by NVD, but connected sources (EUVD and PT Security) describe it as a Stored Cross-Site Scripting (XSS) in the NotificationX Pro plugin for WordPress, affecting all versions up to and including 3.1.4 . The root cause is insufficient input sanitization and outp...
CVE-2026-78563
...
EUVD-2026-65323
The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
PT-2026-81218
Name of the Vulnerable Software and Affected Versions NotificationX Pro versions prior to 3.1.5 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious scripts are permanently stored on...
CVE-2026-68564
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
EUVD-2026-63308
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-68564
CVE-2026-68564 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin NotificationX Pro , affecting versions ≤ 3.1.4 . The flaw allows an attacker to inject malicious scripts without prior authentication, though user interaction is required (per the CVSS vector). T...
CVE-2026-68564 WordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
WordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin NotificationX Pro versions = 3.1.4...
