Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: wpdevteam Component: Notificationx Clear all filters
TI-2025-16565 CVE-2025-22683 · GHSA-m32x-p663-p4h7

WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects NotificationX: from n/a through <= 2.9.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00315 Published 2025-02-03 No fix listed CWE-79
TI-2024-01579 CVE-2024-1698 · GHSA-jfg4-396j-6xjx

SQL injection in wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce…

Priority CRITICAL 88

The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and includ…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77434 Published 2024-02-27 No fix listed CWE-89
TI-2020-18913 CVE-2020-36744 · GHSA-fc7h-9m39-45qq

NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass

Priority LOW 20

The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-01 Fixed in 1.8.3 CWE-352
TI-2022-00275 CVE-2022-0349 · GHSA-r5hp-v7mq-4jr3

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

Priority HIGH 67

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34359 Published 2022-03-07 Fixed in 2.3.9 CWE-89