SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery vulnerabilities
5 known vulnerabilities in SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery from Cozyvision1. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Authentication Bypass Using an Alternate Path or Channel
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 3.9.7 via the `billing_phone` parameter. This
- 9.8 Critical severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Improper Authentication
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validat
- 8.8 High severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, and including, 3.8.1. This makes it possib
- 9.8 Critical severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authentication for Critical Functionality
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a play
- 8.8 High severity
SMS Alert – SMS & OTP for WooCommerce, Order…: Missing Authorization
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updateWcWarrantySettings() function in all versions up to, an