Unrated severityNVD Advisory· Published Nov 11, 2026

CVE-2026-119303

Description

The NotificationX WordPress plugin before 3.3.7 does not perform any capability or nonce check on one of its REST routes, allowing unauthenticated users to update a NotificationX WordPress plugin before 3.3.7 option and to repeatedly trigger emails sent through the site's own mail server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Notificationxllm-fuzzy
Range: <3.3.7
Package: https://wordpress.org/plugins/notificationx

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0280952e-f388-44a3-a891-5855580a5f5b/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000