CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-22683 | NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 3.0.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 3.0.0 | 3.0.0 | 2025-01-31 | — |
The NotificationX plugin for WordPress is susceptible to stored cross-site scripting (XSS) vulnerabilities up to version 2.9.5, as a result of inadequate input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject malicious scripts that will be executed whenever other users view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.