WordPress Plugin Vulnerabilities

WP-SendSMS - Setting Manipulation Cross-Site Request Forgery (CSRF)

Description

The WP-SendSMS WordPress plugin was affected by a Setting Manipulation Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
wp-sendsms
No known fix

References

Exploitdb
26124

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
4c60ba79-fb9a-4ec4-ac9c-67883045bd28

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-11-16
Title
WP EXtra < 6.5 - Cross-Site Request Forgery ToolImport
Published
2023-12-04
Title
CSprite <= 1.1 - Cross-Site Request Forgery
Published
2025-06-05
Title
Market Exporter < 2.0.23 - Cross-Site Request Forgery
Published
2023-11-14
Title
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Cross-Site Request Forgery
Published
2026-03-18
Title
Add Custom Fields to Media < 2.0.4 - Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameter