CVE-2022-0349: vulnerability in NotificationX – Best FOMO, Social Proof…
NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
Published · Updated
Follow this CVE+ Monitor NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 34%
The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection