SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery

Güvenlik açıkları

• CVE-2026-66424kimlik doğrulamasız≤ 3.9.7

  WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

  Kritik 9.8

• CVE-2026-15014kimlik doğrulamasız≤ 3.9.7

  SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter

  Kritik 9.8

• CVE-2026-59540kimlik doğrulamasız≤ 3.9.6

  WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

  Kritik 9.8

• CVE-2026-11387kimlik doğrulamasız≤ 3.9.5

  SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

  Kritik 9.8

• CVE-2025-47682kimlik doğrulamasız≤ 3.8.1

  WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability

  Kritik 9.8

• CVE-2024-13553kimlik doğrulamasız≤ 3.7.9

  SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation

  Kritik 9.8

• CVE-2026-54803abone+≤ 3.9.4

  WordPress SMS Alert Order Notifications plugin <= 3.9.4 - Privilege Escalation vulnerability

  Kritik 9.8

• CVE-2025-49915kimlik doğrulamasız≤ 3.8.5

  WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-62106abone+≤ 3.9.9

  WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability

  Yüksek 8.8

• CVE-2025-3876abone+≤ 3.8.1

  SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function

  Yüksek 8.8

• CVE-2024-11725abone+≤ 3.7.6

  SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

  Yüksek 8.8

• CVE-2026-54802kimlik doğrulamasız≤ 3.9.3

  WordPress SMS Alert Order Notifications plugin <= 3.9.3 - Broken Authentication vulnerability

  Yüksek 7.5

• CVE-2025-26988kimlik doğrulamasız≤ 3.7.8

  WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

  Yüksek 7.5

• CVE-2025-26984kimlik doğrulamasız · tıklama gerekir≤ 3.7.8

  WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2026-32373giriş gerekir≤ 3.9.0

  WordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-3878katılımcı+≤ 3.8.1

  SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode

  Orta 5.4

• CVE-2024-10233katılımcı+≤ 3.7.5

  SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode

  Orta 5.4

• CVE-2025-66086kimlik doğrulamasız≤ 3.8.8

  WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-15671yönetici≤ 3.9.7

  SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter

  Orta 4.9

• CVE-2026-15670yönetici≤ 3.9.7

  SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

  Orta 4.9

• CVE-2026-15673yönetici≤ 3.9.7

  SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings

  Orta 4.4

• CVE-2024-1489kimlik doğrulamasız · tıklama gerekir≤ 3.6.9

  SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery

  Orta 4.3