Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery, with AI-generated Chinese analysis, references, and POCs.

Vendor: cozyvision1

CVE IDTitleCVSSSeverityPublished
CVE-2025-3876 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function CWE-862 8.8 High2025-05-10
CVE-2025-3878 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode CWE-79 6.4 Medium2025-05-10
CVE-2024-13553 SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation CWE-288 9.8 Critical2025-04-01
CVE-2024-11725 SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CWE-862 8.8 High2025-01-07
CVE-2024-10233 SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode CWE-79 6.4 Medium2024-10-29
CVE-2024-1489 SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery CWE-352 4.3 Medium2024-03-13

All 6 known CVE vulnerabilities affecting SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery with full Chinese analysis, references, and POCs where available.