Login Request a demo
NO
Product
NotificationX
by WPDeveloper · last CVE Oct 22, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 2High 1Medium 2Low 0
Severity
All severities5Critical2High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NotificationX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-1698
9.8
78%
Feb 27
The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type'…
Affected: before 2.8.3
CVE-2022-0349
9.8
34%
Mar 7
The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL…
Affected: before 2.3.9
CVE-2022-51021
New
8.2
0%
Oct 22
NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint
Affected: 2.0.0 before 2.3.12
CVE-2025-22683
5.4
0%
Feb 3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects…
Affected: before 3.0.0
CVE-2020-36744
4.3
0%
Jul 1
The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2
Affected: through 1.8.2
Showing 5