Advisories · Technology

WPDeveloper NotificationX.

Every CVE that names WPDeveloper NotificationX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-51021 CVE record

CVSS 8.8 High

NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint
- WPDeveloper NotificationX
- SQL injection
Not analysed yet 22 Oct 2026
CVE-2026-27042 CVE record

CVSS 5.3 Medium

WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability
- WPDeveloper NotificationX
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-22683 CVE record

CVSS 6.5 Medium

WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
- WPDeveloper NotificationX
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2025