Product
The NotificationX plugin for WordPress (versions 2.0.0 through 2.3.11) contains an unauthenticated SQL injection vulnerability in the REST API that allows remote attackers to perform database queries.