Known vulnerabilities in the Sms Alert Order Notifications plugin
14 security advisories have been published for the Sms Alert Order Notifications plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- SMS Alert Order Notifications - Security Vulnerability (CVE-2026-62106) HIGH
- SMS Alert Order Notifications - Privilege Escalation (CVE-2026-66424) CRITICAL
- SMS Alert Order Notifications - Privilege Escalation (CVE-2026-59540) CRITICAL
- SMS Alert Order Notifications - Privilege Escalation (CVE-2026-54803) CRITICAL
- Sms Alert Order Notifications - SQL Injection (CVE-2025-47682) CRITICAL
- Sms Alert Order Notifications - Cross-Site Scripting (XSS) (CVE-2025-3878) MEDIUM
- Sms Alert Order Notifications - Privilege Escalation (CVE-2025-3876) HIGH
- Sms Alert Order Notifications - Privilege Escalation (CVE-2024-13553) CRITICAL
- Sms Alert Order Notifications - SQL Injection (CVE-2025-26988) CRITICAL
- Sms Alert Order Notifications - Cross-Site Scripting (XSS) (CVE-2025-26984) HIGH
- Sms Alert Order Notifications - Privilege Escalation (CVE-2024-11725) HIGH
- Sms Alert Order Notifications - Cross-Site Scripting (XSS) (CVE-2024-10233) MEDIUM
- Sms Alert Order Notifications - Cross-Site Request Forgery (CSRF) (CVE-2024-1489) MEDIUM
- Sms Alert Order Notifications - Cross-Site Scripting (XSS) (CVE-2021-24588) MEDIUM