TI-2025-03327 CVE-2025-3776 · GHSA-5c5g-j5fh-2fvr
Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution
Priority MEDIUM 44
The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function.