Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpdevteam

CVE IDTitleCVSSSeverityPublished
CVE-2026-0554 NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset CWE-862 4.3 Medium2026-01-20
CVE-2025-15380 NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' CWE-79 7.2 High2026-01-20
CVE-2024-11727 NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium2024-12-12
CVE-2024-1698 NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection CWE-89 9.8 Critical2024-02-27
CVE-2020-36744 NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass CWE-352 4.3 Medium2023-07-01

All 5 known CVE vulnerabilities affecting NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar with full Chinese analysis, references, and POCs where available.