WP Sms vulnerabilities

2 known vulnerabilities in WP Sms from VeronaLabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  WP SMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-28136Feb 26, 2026VeronaLabs

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through <= 6.9.12.

• 7.5 High severity

  WP SMS – Messaging & SMS Notification for…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-27447Dec 28, 2023VeronaLabs

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This issue affects WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, Grav