CVE-2025-26988

Description

References

• patchstack.com/database/Wordpress/Plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-woocommerce-plugin-3-7-8-sql-injection-vulnerability · Third Party Advisory

Más vulnerabilidades de sms alert order notifications

• CVE-2025-47682CRÍTICO 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notificati…
• CVE-2025-3878MEDIO 5.4The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_verify…
• CVE-2025-3876ALTO 8.8The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP vali…
• CVE-2024-13553CRÍTICO 9.8The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versi…
• CVE-2025-26984MEDIO 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozy Vision SMS Alert Order Notificati…