Notificationx Security Vulnerabilities and Issues — Notificationx CVE List

Lucene search

WpdeveloperNotificationx

4 matches found

CVE•added 2022/03/07 9:15 a.m.•198 views

CVE-2022-0349

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection

9.8CVSS9.8AI score0.61493EPSS

CVE•added 2024/02/27 6:15 a.m.•155 views

CVE-2024-1698

The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and lack...

9.8CVSS9.5AI score0.93881EPSS

CVE•added 2025/02/03 3:15 p.m.•47 views

CVE-2025-22683

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX allows Stored XSS. This issue affects NotificationX: from n/a through 2.9.5.

6.5CVSS6.4AI score0.00044EPSS

CVE•added 2023/07/01 5:15 a.m.•21 views

CVE-2020-36744

The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2. This is due to missing or incorrect nonce validation on the generate_conversions() function. This makes it possible for unauthenticated attackers to generate conversions via a...

4.3CVSS4.2AI score0.00137EPSS