CVE-2022-0349: The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an…

PriorityP276critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EXPLOIT

EPSS

34.36%

98.2th percentile

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection

Affected

1 ranges

Vendor	Product	Version range	Fixed in
wpdeveloper	notificationx	< 2.3.9	2.3.9

Detection & IOCsextracted from sources · hover to see the quote

othernx_id↗

→No authentication is required to exploit this vulnerability; monitor all requests (including unauthenticated ones) targeting the NotificationX plugin endpoint that include the nx_id parameter with SQL metacharacters ↗
→Target plugin is NotificationX versions before 2.3.9; flag installations running versions < 2.3.9 as vulnerable ↗

·The Sigma/nuclei rule digest provided in the source may be used to verify rule integrity; ensure the rule file matches digest 4a0a00473045022012ab7b0c7de5828772b3a43eec1486a8cf573f2a59e9f7c67d821fca2fa9e1f7022100f054553110df48a0a893faa18e4e1bb99cca0dd257d0720a35c689a9a10ed174 (namespace 922c64590222798bb761d5b6d8e72950) before deployment

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.