cozyvision1 vulnerabilities
11 published CVEs name cozyvision1 among the affected products.
- 11Published CVEs11 of them scored
- 5Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15673
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Medium4.4 - CVE-2026-15670
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Medium4.9 - CVE-2026-15671
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Medium4.9 - CVE-2026-15014
SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Critical9.8 - CVE-2026-11387
SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Critical9.8 - CVE-2025-3878
SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Medium6.4 - CVE-2025-3876
SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
High8.8 - CVE-2024-13553
SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Critical9.8 - CVE-2024-11725
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
High8.8 - CVE-2024-10233
SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode
cozyvision1 · SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Medium6.4