Approved changes feed: RSS · Atom

cpe:2.3:a:cozy_vision:sms_alert_order_notifications:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCozy Vision (ff4dab4c-0dc3-5086-ad2a-45055e1130e4)
ProductSms Alert Order Notifications (a610dcb8-375b-5143-9b06-95938b0567e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32373 vulnerable 2026-06-08 07:57:17.496243 WordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.9.0.
Published: 2026-03-13T11:42:07.122Z
Updated: 2026-04-29T09:51:57.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66086 vulnerable 2026-06-08 07:39:21.208876 WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.8.
Published: 2025-11-21T12:29:58.296Z
Updated: 2026-04-28T16:14:16.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49915 vulnerable 2026-06-08 07:29:15.100870 WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.5.
Published: 2025-10-22T14:32:12.221Z
Updated: 2026-04-28T16:13:07.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47682 vulnerable 2026-06-08 07:27:14.716858 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.1.
Published: 2025-05-12T18:19:43.926Z
Updated: 2026-04-29T09:51:55.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26988 vulnerable 2026-06-08 07:14:50.782212 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.7.8.
Published: 2025-03-03T13:30:41.997Z
Updated: 2026-04-28T16:11:46.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26984 vulnerable 2026-06-08 07:14:50.770846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.