Login Request a demo
NO
Product
NotificationX
by WPDeveloper · last CVE Oct 22, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 1Medium 3Low 0
Severity
All severities6Critical2High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NotificationX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-1698
9.8
78%
Feb 27
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
Affected: before 2.8.3
CVE-2022-0349
9.8
34%
Mar 7
The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL…
Affected: before 2.3.9
CVE-2022-51021
8.2
0%
Oct 22
NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint
Affected: 2.0.0 before 2.3.12
CVE-2025-22683
5.4
0%
Feb 3
WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.9.5
CVE-2026-27042
5.3
0%
Feb 19
WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability
Affected: through 3.2.1
CVE-2020-36744
4.3
0%
Jul 1
The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2
Affected: through 1.8.2
Showing 6