SSL Wireless SMS Notification vulnerabilities

3 known vulnerabilities in SSL Wireless SMS Notification from Sslplugins. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  SSL Wireless SMS Notification: Improper Authentication

  CVE-2026-96228Oct 29, 2026Sslplugins

  SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public final_login_ajax_action handler resolves a user and issues an authenticated session by matching the wp_sslcare_otp table

• 9.3 Critical severity

  SSL Wireless SMS Notification: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-56284Jan 7, 2025Sslplugins

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through

• 9.8 Critical severity

  SSL Wireless SMS Notification: Incorrect Privilege Assignment

  CVE-2024-56220Dec 31, 2024Sslplugins

  Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through <= 3.6.0.