Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-11
FraudLabs Pro SMS Verification - Security Vulnerability (CVE-2026-106007)
The FraudLabs Pro SMS Verification WordPress plugin through 1.12.1 does not enforce its SMS-retry limit on the server side, allowing unauthenticated users to send an unlimited number of verification SMS messages to attacker-chosen phone numbers, exhausting the site owner's paid SMS credits and spamming arbitrary third parties.
PLUGIN
FraudLabs Pro SMS Verification
CVE-2026-106007
Risk Score
Threat Entry
Updated 2026-11-10
FraudLabs Pro SMS Verification - Security Vulnerability (CVE-2026-106008)
The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks before marking a WooCommerce order's SMS verification as completed, allowing unauthenticated users to forge the verified state of an order and bypass the plugin's SMS verification control.
PLUGIN
FraudLabs Pro SMS Verification
CVE-2026-106008
Risk Score
Threat Entry
Updated 2026-06-17
Fraudlabs Pro Sms Verification - Cross-Site Scripting (XSS) (CVE-2024-51688)
Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through
PLUGIN
Fraudlabs Pro Sms Verification
CVE-2024-51688
Risk Score