CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-1698 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 2.8.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Critical 9.8 | < 2.8.3 | 2.8.3 | 2024-02-26 | — |
The NotificationX plugin for WordPress versions up to 2.8.2 contains a SQL injection vulnerability in the 'type' parameter that lacks proper escaping and query preparation. An attacker without authentication can inject additional SQL commands to manipulate database queries and retrieve sensitive data. The vulnerability affects all versions before 2.8.3.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.