CVE-2026-54802
HighCVSS 7.5Summary
Versions of SMS Alert Order Notifications up to 3.9.3 contain a vulnerability in authentication that allows unauthorized access.
Risk Assessment
Organizations may be exposed to unauthorized actions, potentially leading to data breaches or other serious security incidents.
Recommendation
It is recommended to upgrade to the latest version to mitigate this vulnerability.
Other vulnerabilities in SMS Alert Order Notifications
See all- CVE-2026-66424Critical
Unauthenticated Privilege Escalation vulnerability in SMS Alert Order Notifications versions up to 3.9.7. An attacker can gain higher privileges without authentication.
- CVE-2026-59540Critical
The SMS Alert Order Notifications plugin versions up to 3.9.6 contain an unauthenticated privilege escalation vulnerability.
- CVE-2026-54803Critical
Versions of SMS Alert Order Notifications up to 3.9.4 contain a vulnerability that allows subscriber privilege escalation.
Original NVD description (English source)
Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions.