NotificationX vulnerabilities

3 known vulnerabilities in NotificationX from Wpdeveloper. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  NotificationX: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-51021Oct 22, 2026Wpdeveloper

  NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supplying an array-form 'id' parameter to /wp-json/notificationx/v1/notification/{id}.

• 9.8 Critical severity

  NotificationX – FOMO, Live Sales Notification…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-1698Feb 27, 2024WpdevteamEPSS 77.4%

  The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping

• 9.8 Critical severity

  NotificationX – Best FOMO, Social Proof…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-0349Mar 7, 2022NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With ElementorEPSS 34.4%

  The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection