166 matches found
CVE-2026-94258
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to...
CVE-2026-94258
The SMS Alert WordPress plugin (versions 3.6.4 - 4.0.0 ) is vulnerable to a billing phone disclosure flaw due to insufficient authorization checks during Bulk User Actions . On a WordPress multisite network , an administrator from one site can retrieve the stored billing phone numbers of users fr...
CVE-2026-94258 SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to...
SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...
CVE-2026-11387
CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Unauthenticated Privilege Escalation via Arbitrary Password Reset ☆ === Beelze === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type| Missing Authenticatio...
CVE-2026-95594
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
CVE-2026-95594
The SMS Alert Order Notifications plugin for WordPress (versions
EUVD-2026-93067
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
CVE-2026-95594 WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...
CVE-2026-11387-WooCommerce-SMS-OTP
CVE-2026-11387 SMS Alert ≤ 3.9.5 — неаутентифицированное повышение привилегий через произвольный сброс пароля Критическая ошибка аутентификации в плагине WordPress SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery. Когда проверка OTP включена для сброса пароля,...
CVE-2026-62106
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106
SMS Alert Order Notifications WordPress plugin (versions ≤ 3.9.9 ) is affected by a Subscriber-level privilege escalation vulnerability. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privileged (Subscriber) user can achieve hi...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76213
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by benzdeus in WordPress Plugin SMS Alert Order Notifications versions = 3.9.9...
PT-2026-90022
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106: Incorrect Privilege Assignment
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
WordPress SMS Alert plugin < 3.9.8 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Sai Praneeth Koti in WordPress Plugin SMS Alert Order Notifications versions 3.9.8...