105 matches found
CVE-2026-96228
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228
The SSL Wireless SMS Notification plugin for WordPress is vulnerable to an Authentication Bypass in all versions up to and including 3.8.1 . The root cause is that the public final_login_ajax_action handler issues an authenticated session by matching the wp_sslcare_otp table using only the attack...
CVE-2026-96228 SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
EUVD-2026-112590
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228 SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
PT-2026-130627
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public final login ajax action handler resolves a user and issues an authenticated session by matching the wp sslcare otp table on only the attacker-supplied phone a...
WordPress SSL Wireless SMS Notification authorization issue vulnerability
WordPress SSL Wireless SMS Notification versions 3.8.1 and earlier contain an authorization issue vulnerability. This vulnerability arises because the finalloginajaxaction handler matches wpsslcareotp entries based solely on the attacker-supplied phone number and capdata, without verifying whethe...
CVE-2026-96228: sslplugins SSL Wireless SMS Notification: SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and…
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
WordPress SSL Wireless SMS Notification plugin <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover vulnerability
Unauthenticated Authentication Bypass to Account Takeover vulnerability discovered by antaloaalonso in WordPress Plugin SSL Wireless SMS Notification versions = 3.8.1...
CVE-2025-14948
The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...
CVE-2025-14948 miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification
The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...
PT-2026-1760
Name of the Vulnerable Software and Affected Versions miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress versions through 4.3.8 Description The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is subject to unauthorized data...
CVE-2025-14948: Missing Authorization
The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...
CVE-2022-38268
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit=...
CVE-2022-38269
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit=...
CVE-2025-14002: Improper Authentication
The WPCOM Member plugin for WordPress is vulnerable to authentication bypass via brute force in all versions up to, and including, 1.7.16. This is due to weak OTP One-Time Password generation using only 6 numeric digits combined with a 10-minute validity window and no rate limiting on verificatio...
EUVD-2022-42418
Malicious code in bioql PyPI...
EUVD-2022-41391
Malicious code in bioql PyPI...