All packages
SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery vulnerabilities
3 known CVE vulnerabilities in SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery, translated and rated.
- CVE-2026-15673Medium
The SMS Alert plugin for WordPress is vulnerable to SQL Injection via the 'checkout_payment_plans' and 'order_status' settings. Authenticated attackers with admin access can inject SQL queries.
- CVE-2026-15671Medium
The SMS Alert plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter. Authenticated attackers with admin access can inject SQL queries.
- CVE-2026-15670Medium
The SMS Alert plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter. Authenticated attackers with admin access can inject SQL queries.