CVE-2022-0349

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nxid parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection...

PT-2022-7083

Name of the Vulnerable Software and Affected Versions NotificationX versions prior to 2.3.9 Description The issue is related to the lack of sanitization and escaping of the nx id parameter in SQL statements, leading to an Unauthenticated Blind SQL Injection. This allows a remote attacker to execu...