Lucene search
+L

83 matches found

NVD
NVD
added 2025/10/22 3:15 p.m.6 views

CVE-2025-49915

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.5...

9.3CVSS0.00455EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.5 views

CVE-2025-49915 WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.5...

9.3CVSS7.3AI score0.00455EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-45574

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00194EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-14278

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00322EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-5609

Malicious code in bioql PyPI...

9.3CVSS8.7AI score0.00479EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-5626

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00303EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:59 a.m.8 views

CVE-2024-1489

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.9. This is due to missing or incorrect nonce validation on the processBulkAction function. This makes it possible for unauthenticated attacker...

4.3CVSS4.3AI score0.00239EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:2 p.m.7 views

CVE-2021-24588

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

6.1CVSS5.8AI score0.00827EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/14 7:21 p.m.14 views

CVE-2025-47682

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.1...

9.8CVSS7.3AI score0.00322EPSS
Exploits0References1
OSV
OSV
added 2025/05/12 7:15 p.m.6 views

CVE-2025-47682

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce allows SQL Injection.This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.8.2...

9.8CVSS5.8AI score0.00322EPSS
Exploits0References1
NVD
NVD
added 2025/05/12 7:15 p.m.21 views

CVE-2025-47682

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.1...

9.8CVSS0.00322EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/12 6:19 p.m.15 views

CVE-2025-47682 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.1...

9.3CVSS8.9AI score0.00322EPSS
Exploits0References1
CVE
CVE
added 2025/05/12 6:19 p.m.73 views

CVE-2025-47682

CVE-2025-47682 concerns the WordPress plugin “SMS Alert Order Notifications – WooCommerce” by Cozy Vision Technologies. It is an SQL Injection vulnerability caused by improper neutralization of special elements in SQL queries, affecting versions up to 3.8.2. The CVSS details show a high severity ...

9.8CVSS7.3AI score0.00322EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/12 1:24 p.m.10 views

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function vulnerability

Authenticated Subscriber+ Privilege Escalation via handleWpLoginCreateUserAction Function vulnerability discovered by wesley wcraft in WordPress Plugin SMS Alert Order Notifications versions = 3.8.1...

8.8CVSS8.4AI score0.00387EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/12 1:23 p.m.10 views

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via saverify Shortcode vulnerability discovered by wesley wcraft in WordPress Plugin SMS Alert Order Notifications versions = 3.8.1...

6.4CVSS6.3AI score0.00231EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/12 12:0 a.m.6 views

WordPress plugin SMS Alert Order Notifications – WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin SMS Alert Order Notifications...

9.8CVSS9AI score0.00322EPSS
Exploits0References2
OSV
OSV
added 2025/05/10 12:15 p.m.7 views

CVE-2025-3878

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's saverify shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

5.4CVSS5.9AI score0.00231EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/10 11:22 a.m.9 views

CVE-2025-3878 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's saverify shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00231EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/10 11:22 a.m.37 views

CVE-2025-3876 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction function in all versions up to, and including, 3.8.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00387EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/05/10 11:22 a.m.11 views

CVE-2025-3876 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction function in all versions up to, and including, 3.8.1. This makes it possible for authenticated attackers, with...

8.8CVSS6.7AI score0.00387EPSS
Exploits0References5
Rows per page
Query Builder