High
CVE-2026-68564
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
Medium
CVE-2026-0554
NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
High
CVE-2025-15380
NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'
Medium
CVE-2026-27042
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar <= 3.2.1 - Missing Authorization
Medium
CVE-2025-22683
NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11727
NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-1698
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
High
36dec90a-fead-48f5-a88b-dfbc6d8bffb4
NotificationX <= 2.3.11 - SQL Injection
Critical
CVE-2022-0349
NotificationX <= 2.3.8 - Blind SQL Injection
Medium
CVE-2020-36744
NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.