WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc

Information

Software Type Plugin
Software Slug wp-sms (view on wordpress.org)
Software Status Active
Software Author mostafas1990
Software Website wp-sms-pro.com
Software Downloads 571,953
Software Active Installs 9,000
Software Record Last Updated March 29, 2024

10 Vulnerabilities

Title CVE ID CVSS Researchers Date
WP SMS <= 6.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-25920 6.4 Ray Wilson February 14, 2024
WP SMS <= 6.5.2 - Reflected Cross-Site Scripting via 'page' CVE-2024-24881 6.1 Dimas Maulana February 5, 2024
WP SMS <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 January 12, 2024
WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion CVE-2023-6980 4.3 Krzysztof Zając January 2, 2024
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting CVE-2023-6981 6.1 Krzysztof Zając January 2, 2024
WP SMS <= 6.1.5 - Cross-Site Request Forgery 4.3 July 7, 2023
WP SMS <= 6.1.4 - Reflected Cross-Site Scripting via 'delete_mobile' CVE-2023-32742 6.1 Le Ngoc Anh May 15, 2023
WP SMS <= 6.0.4 - Information Disclosure via REST API CVE-2023-27447 5.3 Jarko Piironen March 2, 2023
WP SMS <= 5.4.12 - Authenticated Stored Cross-Site Scripting CVE-2021-24561 5.5 Muhammad Daffa July 26, 2021
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc <= 5.4.9 - Reflected Cross-Site Scripting 6.1 WPScanTeam June 30, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation