Cozyvision vulnerabilities
We track 3 vulnerabilities in Cozyvision products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 10, 2025.
Latest Cozyvision vulnerabilities
- 8.8 High severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, and including, 3.8.1. This makes it possib
- 9.8 Critical severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authentication for Critical Functionality
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a play
- 8.8 High severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updateWcWarrantySettings() function in all versions up to, an