WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce

Уязвимости

• CVE-2024-43331без авторизации≤ 6.9.3

  WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-30454без авторизации · нужен клик≤ 6.6.2

  WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2026-28136высокие права≤ 6.9.12

  WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2023-27447без авторизации≤ 6.0.4

  WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure

  Высокий 7.5

• CVE-2026-40790подписчик+≤ 7.2.1

  WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2024-24881без авторизации · нужен клик≤ 6.5.2

  WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2023-32742без авторизации · нужен клик≤ 6.1.4

  WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2026-25343высокие права≤ 7.1

  WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2025-62006нужен вход≤ 7.0.1

  WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2024-25920нужен вход≤ 6.3.4

  WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2021-24561нужен вход→ 5.4.13

  WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-6981админ≤ 6.5

  WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting

  Средний 4.9

• CVE-2024-34811высокие права≤ 6.5.1

  WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2023-6980без авторизации · нужен клик≤ 6.5

  WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion

  Средний 4.3