A vulnerability, which was classified as problematic, was found in NotificationX Plugin up to 3.1.11 on WordPress. Affected by this vulnerability is an unknown functionality of the component REST API Endpoint. Such manipulation leads to missing authorization.
This vulnerability is traded as CVE-2026-0554. The attack may be launched remotely. There is no exploit available.