Vulnerabilities

TI-2023-27748 CVE-2023-50843 · GHSA-5j49-8vfq-6j67

WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00529 Published 2023-12-28 No fix listed CWE-89

TI-2017-13020 CVE-2017-17780 · GHSA-mjgv-gvww-c6jv

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to"…

LOW 29

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00951 Published 2017-12-20 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to"…