15 matches found
CVE-2026-96228
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228
The SSL Wireless SMS Notification plugin for WordPress is vulnerable to an Authentication Bypass in all versions up to and including 3.8.1 . The root cause is that the public final_login_ajax_action handler issues an authenticated session by matching the wp_sslcare_otp table using only the attack...
EUVD-2026-112590
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228 SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
WordPress SSL Wireless SMS Notification plugin <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover vulnerability
Unauthenticated Authentication Bypass to Account Takeover vulnerability discovered by antaloaalonso in WordPress Plugin SSL Wireless SMS Notification versions = 3.8.1...
CVE-2024-56284
CVE-2024-56284 affects the WordPress plugin SSL Wireless SMS Notification. The issue is an SQL Injection caused by improper neutralization of input in SQL commands. Affected version range: from n/a up to 3.5.0. CVSS v3.1 base score 9.3 (CRITICAL), vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. Root...
CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SSL Wireless SSL Wireless SMS Notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...
PT-2025-3247
Name of the Vulnerable Software and Affected Versions SSL Wireless SMS Notification versions n/a through 3.5.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...
CVE-2024-56284: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...
CVE-2024-56220
Incorrect Privilege Assignment vulnerability in SSL Wireless SSL Wireless SMS Notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...
CVE-2024-56220 WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
CVE-2024-56220 WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
WordPress plugin SSL Wireless SMS Notification has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2024-56220: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin SSL Wireless SMS Notification versions = 3.6.0...