WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
notification-for-telegram
Published
2025-11-29
Title
Notification for Telegram < 3.5.2 - Missing Authorization
Slug
notification-for-telegram
Published
2026-04-20
Title
Notification for Telegram < 3.5.1 - Unauthenticated Stored Cross-Site Scripting
Slug
notification-for-telegram
Published
2026-07-10
Title
Notification for Telegram < 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Cron Modification via nftb_cron_action_set AJAX Action
Slug
notification-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
notifications-center
Published
2025-01-16
Title
Notifications Center <= 1.5.2 - Reflected Cross-Site Scripting
Slug
notificationx
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
notificationx
Published
2022-02-02
Title
NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
Slug
notificationx
Published
2022-02-28
Title
NotificationX < 2.3.12 - Unauthenticated SQLi
Slug
notificationx
Published
2020-09-16
Title
NotificationX < 1.8.3 - Cross-Site Request Forgery
Slug
notificationx
Published
2024-02-26
Title
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor < 2.8.3 - Unauthenticated SQL Injection
Slug
notificationx
Published
2024-12-11
Title
NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar < 2.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
notificationx
Published
2025-01-31
Title
NotificationX < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
notificationx
Published
2026-01-20
Title
NotificationX < 3.2.1 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
Slug
notificationx
Published
2026-01-20
Title
NotificationX < 3.2.1 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'
Slug
notificationx
Published
2026-01-15
Title
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar < 3.2.2 - Missing Authorization
Slug
notifier
Published
2024-07-10
Title
WANotifier < 2.6.1 - Admin+ Stored XSS
Slug
notifier
Published
2025-06-19
Title
WANotifier < 2.7.13 - Missing Authorization
Slug
notifier
Published
2026-01-20
Title
WANotifier < 3.0.0 - Missing Authorization
Slug
notifier
Published
2026-06-15
Title
WANotifier < 2.6 - Subscriber+ LFI
Slug
notifikacie-sk
Published
2025-01-16
Title
Notifikácie.sk <= 1.0 - Reflected Cross-Site Scripting
Slug
notify-odoo
Published
2025-01-03
Title
Notify Odoo < 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
notify-odoo
Published
2026-05-14
Title
Notify Odoo < 1.0.2 - Cross-Site Request Forgery to Settings Update
Slug
notifyvisitors-lead-form
Published
2023-08-30
Title
NotifyVisitors <= 1.0 - Admin+ Stored XSS
Slug
nova-blocks
Published
2024-09-09
Title
Nova Blocks by Pixelgrade < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Slug
nova-blocks
Published
2025-04-01
Title
Nova Blocks by Pixelgrade < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting