WordPress Plugin Vulnerabilities | Page 97 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-10-28

Title

SMSAlert - WooCommerce < 3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode

Slug

Published

2025-01-06

Title

SMS Alert Order Notifications – WooCommerce < 3.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Slug

Published

2025-02-23

Title

SMS Alert Order Notifications – WooCommerce < 3.7.9 - Reflected Cross-Site Scripting

Slug

Published

2025-03-02

Title

SMS Alert Order Notifications – WooCommerce < 3.7.9 - Unauthenticated SQL Injection

Slug

Published

2025-03-31

Title

SMS Alert Order Notifications < 3.8.0 - Unauthenticated Account Takeover/Privilege Escalation

Slug

Published

2025-05-09

Title

SMS Alert Order Notifications – WooCommerce < 3.8.2 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function

Slug

Published

2025-05-09

Title

SMS Alert Order Notifications – WooCommerce < 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode

Slug

Published

2025-05-08

Title

SMS Alert Order Notifications – WooCommerce < 3.8.2 - Unauthenticated SQL Injection

Slug

Published

2025-08-15

Title

SMS Alert Order Notifications < 3.8.6 - Unauthenticated SQL Injection

Slug

Published

2025-12-05

Title

SMS Alert Order Notifications < 3.8.9 - Missing Authorization

Slug

Published

2026-02-18

Title

SMS Alert Order Notifications < 3.9.1 - Missing Authorization

Slug

Published

2026-06-16

Title

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.4 - Missing Authorization

Slug

Published

2026-06-30

Title

SMS Alert < 3.9.6 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

Slug

Published

2026-07-20

Title

SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile

Slug

Published

2026-07-22

Title

SMS Alert < 3.9.7 - Unauthenticated Missing Authorization via reset_style and smsalert-group-sync Actions

Slug

Published

2026-07-27

Title

SMS Alert < 3.9.8 - Authenticated (Administrator+) SQL Injection via 'id' Parameter

Slug

Published

2026-07-27

Title

SMS Alert < 3.9.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

Slug

Published

2026-07-27

Title

SMS Alert < 3.9.8 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings

Slug

Published

2026-06-16

Title

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.5 - Authenticated (Subscriber+) Privilege Escalation

Slug

Published

2026-08-06

Title

SMS Alert Order Notifications < 3.9.8 - Unauthenticated Privilege Escalation

Slug

Published

2026-09-11

Title

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 4.0.0 - Authenticated (Subscriber+) Privilege Escalation

Slug

Published

2026-10-05

Title

SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery < 4.0.1 - Unauthenticated Privilege Escalation

Slug

Published

2026-10-06

Title

SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions

Slug

Published

2026-10-08

Title

SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP

Slug

Published

2026-10-08

Title

SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset