NF
Product
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
7
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1698 | 9.8 | Feb 27 | NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection Affected: through 2.8.2 |
| CVE-2026-109513 | 7.2 | Oct 16 | NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route Affected: through 3.3.3 |
| CVE-2025-15380 | 7.2 | Jan 20 | NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' Affected: through 3.2.0 |
| CVE-2026-110721 | 5.3 | Oct 16 | NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route Affected: through 3.3.3 |
| CVE-2024-11727 | 4.4 | Dec 12 | NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 2.9.3 |
| CVE-2026-0554 | 4.3 | Jan 20 | NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset Affected: through 3.1.11 |
| CVE-2020-36744 | 4.3 | Jul 1 | NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass Affected: before 1.8.3 |
Showing 7