agentprime: wpdevteam-notificationx-fomo-live-sales-notification-woocommerce-sales-popup-gdpEvery new CVE for wpdevteam-notificationx-fomo-live-sales-notification-woocommerce-sales-popup-gdp.https://agentprime.io/CVE-2026-109513: NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Routehttps://agentprime.io/advisories/CVE-2026-109513/https://agentprime.io/advisories/CVE-2026-109513/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:26 GMTCVECVE-2026-110721: NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Routehttps://agentprime.io/advisories/CVE-2026-110721/https://agentprime.io/advisories/CVE-2026-110721/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 04:27:00 GMTCVECVE-2026-0554: NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Resethttps://agentprime.io/advisories/CVE-2026-0554/https://agentprime.io/advisories/CVE-2026-0554/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 14:26:34 GMTCVECVE-2025-15380: NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'https://agentprime.io/advisories/CVE-2025-15380/https://agentprime.io/advisories/CVE-2025-15380/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 14:26:33 GMTCVECVE-2024-11727: NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-11727/https://agentprime.io/advisories/CVE-2024-11727/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Dec 2024 06:46:32 GMTCVECVE-2024-1698: NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-1698/https://agentprime.io/advisories/CVE-2024-1698/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.77 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Feb 2024 05:33:12 GMTCVEcriticalCVE-2020-36744: NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypasshttps://agentprime.io/advisories/CVE-2020-36744/https://agentprime.io/advisories/CVE-2020-36744/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Jul 2023 04:26:51 GMTCVE