CVE-2025-3776

CVE-2025-3776 - Remote Code Execution in "Verification SMS with TargetSMS" Plugin = 1.5 Plugin Information Plugin Name: Verification SMS with TargetSMS Vulnerable Versions: = 1.5 CVE ID: CVE-2025-3776 Type: Remote Code Execution RCE OWASP Classification: A1: Injection CVSS Severity: 10.0 Critical...

CVE-2025-3776

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

CVE-2025-3776

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

CVE-2025-3776

CVE-2025-3776 affects the WordPress Verification SMS with TargetSMS plugin (versions up to 1.5). The vulnerability is a limited Remote Code Execution via the targetvr_ajax_handler function, caused by lack of validation of the callable function type, allowing unauthenticated attackers to execute a...

CVE-2025-3776 Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

Exploit for CVE-2025-3776

CVE-2025-3776 - Remote Code Execution in "Verification SMS wit...

WordPress plugin: Verification SMS with TargetSMS – code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

WordPress Verification SMS with TargetSMS 1.5 Remote Code Execution

WordPress Verification SMS with TargetSMS plugin versions 1.5 and below suffer from a logic flaw that allow for remote code execution...

CVE-2025-3776: Improper Control of Generation of Code

The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvrajaxhandler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for...

WordPress Verification SMS with TargetSMS plugin <= 1.5 - Unauthenticated Limited Remote Code Execution vulnerability

Unauthenticated Limited Remote Code Execution vulnerability discovered by Cheng Liu in WordPress Plugin Verification SMS with TargetSMS versions = 1.5...