TI-2025-11535 CVE-2025-12580 · GHSA-fwpv-8w5r-6h2x
SMS for WordPress <= 1.1.8 - Reflected Cross-Site Scripting
Priority LOW 27
The SMS for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping.