Notificationx (Wpdeveloper) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 302 known versions, newest CVE from 2026-10-22. Vendor: Wpdeveloper.

CVEs of Notificationx

• CVE-2022-51021 - CVSS 8.8 (high), 2026-10-22: NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate…
• CVE-2026-27042 - CVSS 5.3 (medium), 2026-02-19: Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-22683 - CVSS 6.5 (medium), 2025-02-03: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored…
• CVE-2024-1698 - CVSS 9.8 (critical), 2024-02-27: The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL…
• CVE-2020-36744 - CVSS 4.3 (medium), 2023-07-01: The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2. This is due to missing or…
• CVE-2022-0349 - CVSS 9.8 (critical), 2022-03-07: The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an…