4.3
Moyenne
CVE-2026-0554 The NotificationX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…
Description
The NotificationX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'regenerate' and 'reset' REST API endpoints in all versions up to, and including, 3.1.11. This makes it possible for authenticated attackers, with Contributor-level access and above, to reset analytics for any NotificationX campaign, regardless of ownership.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar 3.1 | premières → 3.1.11 | Pas de correctif indiqué |
Autres CVE de NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
Les 7 CVE de NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar →
CVE-2026-109513
The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner &…
7.2
Élevée
CVE-2026-110721
The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection…
5.3
Moyenne
CVE-2025-15380
The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner &…
7.2
Élevée
CVE-2024-11727
The NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating…
4.4
Moyenne