CVE-2022-51021 | WPDeveloper NotificationX Plugin up to 2.3.11 notification id sql injection

October 22, 2026 Yanac

A vulnerability marked as critical has been reported in WPDeveloper NotificationX Plugin up to 2.3.11. Affected by this issue is some unknown functionality of the file /wp-json/notificationx/v1/notification. The manipulation of the argument ID leads to sql injection.

This vulnerability is documented as CVE-2022-51021. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More