23 matches found
CVE-2026-96228
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
EUVD-2026-112590
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228 SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public finalloginajaxaction handler resolves a user and issues an authenticated session by matching the wpsslcareotp table on only the attacker-supplied phone and...
CVE-2026-96228
The SSL Wireless SMS Notification plugin for WordPress is vulnerable to an Authentication Bypass in all versions up to and including 3.8.1 . The root cause is that the public final_login_ajax_action handler issues an authenticated session by matching the wp_sslcare_otp table using only the attack...
WordPress SSL Wireless SMS Notification plugin <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover vulnerability
Unauthenticated Authentication Bypass to Account Takeover vulnerability discovered by antaloaalonso in WordPress Plugin SSL Wireless SMS Notification versions = 3.8.1...
EUVD-2024-53081
Malicious code in bioql PyPI...
EUVD-2024-53018
Malicious code in bioql PyPI...
CVE-2024-56220
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
CVE-2024-56284
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...
CVE-2024-56284
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...
CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...
CVE-2024-56284
CVE-2024-56284 affects the WordPress plugin SSL Wireless SMS Notification. The issue is an SQL Injection caused by improper neutralization of input in SQL commands. Affected version range: from n/a up to 3.5.0. CVSS v3.1 base score 9.3 (CRITICAL), vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. Root...
CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SSL Wireless SSL Wireless SMS Notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...
PT-2025-3247
Name of the Vulnerable Software and Affected Versions SSL Wireless SMS Notification versions n/a through 3.5.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...
CVE-2024-56284: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...
WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin SSL Wireless SMS Notification versions = 3.5.0...
CVE-2024-56220
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
CVE-2024-56220
Incorrect Privilege Assignment vulnerability in SSL Wireless SSL Wireless SMS Notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...
CVE-2024-56220 WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...
CVE-2024-56220
CVE-2024-56220 covers an Incorrect Privilege Assignment vulnerability in the SSL Wireless SMS Notification WordPress plugin. The issue allows unauthenticated Privilege Escalation by exploiting faulty privilege handling in the plugin’s SMS notification feature, affecting SSL Wireless SMS Notificat...