Read the docs

wpdevteam

Records210All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

wpdevteam records in CISA KEV

No wpdevteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Essential Addons For Elementor 55 records CRITICAL Embedpress 26 records MEDIUM Essential Blocks 25 records HIGH Reviewx 8 records HIGH Simple 301 Redirects 5 records MEDIUM Betterdocs 4 records MEDIUM Notificationx 4 records CRITICAL Betterlinks 3 records MEDIUM

Records

4 records in Notificationx · all components

TI-2024-01579 CVE-2024-1698 · GHSA-jfg4-396j-6xjx

SQL injection in wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce…

Priority CRITICAL 88

The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and includ…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77434 Published 2024-02-27 No fix listed CWE-89
TI-2022-00275 CVE-2022-0349 · GHSA-r5hp-v7mq-4jr3

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

Priority HIGH 67

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34359 Published 2022-03-07 Fixed in 2.3.9 CWE-89
TI-2025-16565 CVE-2025-22683 · GHSA-m32x-p663-p4h7

WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects NotificationX: from n/a through <= 2.9.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00315 Published 2025-02-03 No fix listed CWE-79
TI-2020-18913 CVE-2020-36744 · GHSA-fc7h-9m39-45qq

NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass

Priority LOW 20

The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-01 Fixed in 1.8.3 CWE-352
Open these records in search →