Read the docs

clicksend

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

clicksend records in CISA KEV

No clicksend vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-39063 CVE-2025-62915 · GHSA-p2v3-q8r8-fhjv

WordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clicksend-contactform7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Contact…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00246 Published 2025-10-27 No fix listed CWE-862
TI-2024-10518 CVE-2024-11353 · GHSA-cj83-fq7x-8jxp

SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

Priority LOW 20

The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_message() function in all versions up to, and including, 1.1.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00313 Published 2024-12-07 No fix listed CWE-862
Open these records in search →