Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: cozyvision1 Component: Sms Alert Order Notifications Clear all filters
TI-2025-30179 CVE-2025-47682 · GHSA-cmjf-q672-wjj5

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notificati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2025-05-12 No fix listed CWE-89
TI-2025-03425 CVE-2025-3878 · GHSA-v7fg-84w6-2g4w

Cross-site scripting in cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order…

Priority LOW 28

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_verify shortcode in all versions up to, and including, 3.8.1 due to insufficient input…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00282 Published 2025-05-10 No fix listed CWE-79
TI-2025-03424 CVE-2025-3876 · GHSA-7q3g-fmhh-pjvm

Missing authorization in cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order…

Priority MEDIUM 40

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0046 Published 2025-05-10 No fix listed CWE-862
TI-2025-19859 CVE-2025-26988 · GHSA-vccg-pg4r-fjxh

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notificati…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00523 Published 2025-03-03 No fix listed CWE-89
TI-2025-19855 CVE-2025-26984 · GHSA-24wm-5x58-mcgj

Cross-site scripting in cozyvision1 SMS Alert Order Notifications

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Reflected XSS.This issue affects SMS Alert Order Notificati…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2025-03-03 No fix listed CWE-79
TI-2024-10871 CVE-2024-11725 · GHSA-x26h-g6hw-673v

Missing authorization in cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order…

Priority MEDIUM 41

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updateWcWarrantySetti…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00528 Published 2025-01-07 No fix listed CWE-862
TI-2024-09489 CVE-2024-10233 · GHSA-gj59-hj7r-69pj

SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode

Priority LOW 28

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_subscribe shortcode in all versions up to, and including, 3.7.5 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00362 Published 2024-10-29 No fix listed CWE-79