Plugin icon

NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar

notificationx

Vulnerabilities:

9

Last Updated:

March 5, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-01-20
Title
NotificationX < 3.2.1 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
Fixed in
Fixed in 3.2.1
CVSS
4.3 (medium)
Published
2026-01-20
Title
NotificationX < 3.2.1 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'
Fixed in
Fixed in 3.2.1
CVSS
7.2 (high)
Published
2025-01-31
Title
NotificationX < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.0.0
CVSS
6.4 (medium)
Published
2024-12-11
Title
NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar < 2.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.9.4
CVSS
4.4 (medium)
Published
2024-02-26
Title
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor < 2.8.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.8.3
CVSS
9.8 (critical)
Published
2022-02-28
Title
NotificationX < 2.3.12 - Unauthenticated SQLi
Fixed in
Fixed in 2.3.12
CVSS
8.6 (high)
Published
2022-02-02
Title
NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
Fixed in
Fixed in 2.3.9
CVSS
8.6 (high)
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.8.3
CVSS
5.4 (medium)
Published
2020-09-16
Title
NotificationX < 1.8.3 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.3
CVSS
4.3 (medium)