CVE-2026-11387 SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

EUVD-2026-40922

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

CGA-6XG7-R6G7-VP8X

Bulletin has no description...

CVE-2026-43713

creationtimestamp| type| source ---|---|--- 2026-07-01 03:15:02+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:59+00:00| seen| https://www.thezdi.com/blog/2026/6/30/the-june-2026-apple-security-update-review 2026-07-02 01:00:43+00:00| seen|...

CVE-2026-48281

creationtimestamp| type| source ---|---|--- 2026-07-01 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkjycun2h2g 2026-07-01 09:45:09+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00|...

CVE-2026-53221

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:53+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:51:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvm45eqw2j 2026-07-06 06:51:09+00:00| seen|...

CVE-2026-53219

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:50+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:52:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvopzxxs2k 2026-07-06 06:51:06+00:00| seen|...

CVE-2026-53214

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:37+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 16:12:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqwsxy6vu2f 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-53213

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:34+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:51:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvnaesbx2y 2026-07-06 06:50:51+00:00| seen|...

CVE-2026-53196

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:25+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:50:30+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-02 04:46:00+00:00| seen|...

CVE-2026-53182

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:13+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:50:09+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-01 04:45:58+00:00| seen|...

CVE-2026-53146

creationtimestamp| type| source ---|---|--- 2026-07-01 02:47:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:49:23+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-53135

creationtimestamp| type| source ---|---|--- 2026-07-01 02:47:38+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:49:06+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-53133

creationtimestamp| type| source ---|---|--- 2026-07-01 02:47:35+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:49:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-01 04:45:55+00:00| seen|...

CVE-2026-52947

creationtimestamp| type| source ---|---|--- 2026-07-01 02:47:30+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:45:09+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-52912

creationtimestamp| type| source ---|---|--- 2026-07-01 02:46:51+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:23:53+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:03:45+00:00| seen|...

CVE-2026-53228

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:39+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:54:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvrgwgh42f 2026-07-06 06:51:20+00:00| seen|...

CVE-2026-35096

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:41+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-35095...

CVE-2026-48276

creationtimestamp| type| source ---|---|--- 2026-07-01 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkgmzkfc726 2026-07-01 09:45:03+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 12:00:35+00:00|...

CVE-2026-11387: Improper Authentication

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...