NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor, d1480717-726d-4be2-95cb-1007a3f010bb
- CVE, Research URL
- Published on
- -
- Research Description
- NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 2.3.12 NotificationX < 2.3.12 - Unauthenticated SQLi The plugin does not validate and escape the id parameter in its notificationx/v1/notification REST endpoint before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL Injection attacks.
- Affected versions
-
max 2.3.12.
- Status
-
vulnerable