Known vulnerabilities in the Wp Sms plugin
14 security advisories have been published for the Wp Sms plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wp Sms - Security Vulnerability (CVE-2026-40790) MEDIUM
- Wp Sms - SQL Injection (CVE-2026-28136) HIGH
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2026-25343) MEDIUM
- Wp Sms - Broken Access Control (CVE-2025-62006) MEDIUM
- Wp Sms - Broken Access Control (CVE-2024-43331) MEDIUM
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2024-34811) MEDIUM
- Wp Sms - Cross-Site Request Forgery (CSRF) (CVE-2024-30454) MEDIUM
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2024-25920) MEDIUM
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2024-24881) HIGH
- Wp Sms - SQL Injection (CVE-2023-6981) MEDIUM
- Wp Sms - Cross-Site Request Forgery (CSRF) (CVE-2023-6980) MEDIUM
- Wp Sms - Information Disclosure (CVE-2023-27447) MEDIUM
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2023-32742) HIGH
- Wp Sms - Cross-Site Scripting (XSS) (CVE-2021-24561) MEDIUM