163 matches found
SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...
CVE-2026-11387
CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Élévation de privilèges non authentifiée via réinitialisation arbitraire de mot de passe ☆ === Beelze === 📋 Informations de vulnérabilité Champ| Détails ---|--- CVE ID| CVE-2026-11387 Score CVSS| 9.8 Critique Vecteur CVSS|...
CVE-2026-95594
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
CVE-2026-95594
The SMS Alert Order Notifications plugin for WordPress (versions
CVE-2026-95594 WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
EUVD-2026-93067
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
CVE-2026-11387-WooCommerce-SMS-OTP
CVE-2026-11387 SMS Alert ≤ 3.9.5 — неаутентифицированное повышение привилегий через произвольный сброс пароля Критическая ошибка аутентификации в плагине WordPress SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery. Когда проверка OTP включена для сброса пароля,...
CVE-2026-62106
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106
SMS Alert Order Notifications WordPress plugin (versions ≤ 3.9.9 ) is affected by a Subscriber-level privilege escalation vulnerability. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privileged (Subscriber) user can achieve hi...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76213
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by benzdeus in WordPress Plugin SMS Alert Order Notifications versions = 3.9.9...
PT-2026-90022
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106: Incorrect Privilege Assignment
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
WordPress SMS Alert plugin < 3.9.8 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Sai Praneeth Koti in WordPress Plugin SMS Alert Order Notifications versions 3.9.8...
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...