wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar

• CVE-2026-109513 High 7.2 NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route 0.2%
• CVE-2026-110721 Medium 5.3 NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route 0.2%
• CVE-2026-0554 Medium 4.3 NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset 0.3%
• CVE-2025-15380 High 7.2 NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' 0.3%
• CVE-2024-11727 Medium 4.4 NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
• CVE-2024-1698 Critical 9.8 NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection 77.4%
• CVE-2020-36744 Medium 4.3 NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass 0.4%