Cpe:2.3:a:wpdeveloper:notificationx:*:*:*:*:*:wordpress:*:*

The NotificationX plugin for WordPress (versions 2.0.0 through 2.3.11) contains an unauthenticated SQL injection vulnerability in the REST API that allows remote attackers to perform database queries.