Sms Alert Order Notifications vulnerabilities

3 known vulnerabilities in Sms Alert Order Notifications from Cozyvision. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization

  CVE-2025-3876May 10, 2025Cozyvision1

  The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, and including, 3.8.1. This makes it possib

• 9.8 Critical severity

  SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authentication for Critical Functionality

  CVE-2024-13553Apr 1, 2025Cozyvision1

  The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a play

• 8.8 High severity

  SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization

  CVE-2024-11725Jan 7, 2025Cozyvision1

  The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updateWcWarrantySettings() function in all versions up to, an