Skip to content
OpenAdvisories

Product · WPDeveloper

NotificationX

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2022-51021

    NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint

    NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supplying an array-form 'id' parameter to /wp-json/notificationx/v1/notification/{id}…

    WPDeveloper NotificationX Web / CMS