CVE Catalog
CVE-2026-59540
CriticalCVSS 9.8Summary
The SMS Alert Order Notifications plugin versions up to 3.9.6 contain an unauthenticated privilege escalation vulnerability.
Risk Assessment
An unauthenticated attacker can gain elevated privileges, potentially leading to full system compromise.
Recommendation
It is recommended to update the SMS Alert Order Notifications plugin to a version later than 3.9.6.
Original NVD description (English source)
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.