CVE-2025-47682

CVE-2025-47682 concerns the WordPress plugin “SMS Alert Order Notifications – WooCommerce” by Cozy Vision Technologies. It is an SQL Injection vulnerability caused by improper neutralization of special elements in SQL queries, affecting versions up to 3.8.2. The CVSS details show a high severity ...

CVE-2024-1489

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.9. This is due to missing or incorrect nonce validation on the processBulkAction function. This makes it possible for unauthenticated attacker...