What’s Vulnerable › Products

SMS Alert vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your SMS Alert version is affected

Latest SMS Alert vulnerabilities

• CVE-2026-94257 — SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation via Arbitrary Password Reset (CVSS 8.1)
• CVE-2026-94256 — SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP (CVSS 8.1)
• CVE-2026-94258 — SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions (CVSS 2.7)
• CVE-2026-15206 — SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile (CVSS 7.5)