Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

cozyvision1 — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting cozyvision1. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cozyvision1 develops network video surveillance systems primarily for commercial and industrial security applications. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and improper access controls. Notable security characteristics include default credentials in some models and unencrypted communications in older firmware versions. While no major public incidents have been widely documented, the six CVEs on record highlight ongoing security concerns, particularly in web interfaces and mobile companion applications that expose devices to potential exploitation.

CVE ID Title CVSS Severity Published
CVE-2026-15670 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-89 4.9 Medium 2026-07-28
CVE-2026-15673 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-89 4.4 Medium 2026-07-28
CVE-2026-15671 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-89 4.9 Medium 2026-07-28
CVE-2026-15014 SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-288 9.8 Critical 2026-07-28
CVE-2026-11387 SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-287 9.8 Critical 2026-07-01
CVE-2025-3876 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-862 8.8 High 2025-05-10
CVE-2025-3878 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-79 6.4 Medium 2025-05-10
CVE-2024-13553 SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-288 9.8 Critical 2025-04-01
CVE-2024-11725 SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-862 8.8 High 2025-01-07
CVE-2024-10233 SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-79 6.4 Medium 2024-10-29
CVE-2024-1489 SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery — SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery CWE-352 4.3 Medium 2024-03-13

This page lists every published CVE security advisory associated with cozyvision1. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.