WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce

Güvenlik açıkları

• CVE-2024-43331kimlik doğrulamasız≤ 6.9.3

  WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-30454kimlik doğrulamasız · tıklama gerekir≤ 6.6.2

  WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2026-28136yüksek yetki≤ 6.9.12

  WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2023-27447kimlik doğrulamasız≤ 6.0.4

  WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure

  Yüksek 7.5

• CVE-2026-40790abone+≤ 7.2.1

  WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2024-24881kimlik doğrulamasız · tıklama gerekir≤ 6.5.2

  WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2023-32742kimlik doğrulamasız · tıklama gerekir≤ 6.1.4

  WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2026-25343yüksek yetki≤ 7.1

  WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2025-62006giriş gerekir≤ 7.0.1

  WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2024-25920giriş gerekir≤ 6.3.4

  WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2021-24561giriş gerekir→ 5.4.13

  WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting

  Orta 5.4

• CVE-2023-6981yönetici≤ 6.5

  WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting

  Orta 4.9

• CVE-2024-34811yüksek yetki≤ 6.5.1

  WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2023-6980kimlik doğrulamasız · tıklama gerekir≤ 6.5

  WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion

  Orta 4.3