Lucene search
K

4 matches found

Patchstack
Patchstack
added 2025/12/05 4:42 p.m.4 views

WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin SMS Alert Order Notifications versions = 3.8.8...

5.3CVSS6.9AI score0.00038EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.29 views

CVE-2024-51637 WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...

7.1CVSS0.00144EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.8 views

CVE-2024-51637 WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...

7.1CVSS5.9AI score0.00144EPSS
Exploits0References1
CNVD
CNVD
added 2021/09/08 12:0 a.m.14 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-70735)

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress plugin, which stems from a cross-site scripting XSS vulnerability in the settings page of the SMS Alert Order Notifications...

6.1CVSS1.5AI score0.0021EPSS
Exploits2References1
Rows per page
Query Builder