title: NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
description: The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection
problem types: CWE-89 SQL Injection
affected:
{
product: NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor
vendor: Unknown
versions:
lessThan: 2.3.9, status: affected, version: 2.3.9, versionType: custom
}