CVE-2026-110882
CVE-2026-110882 · WordPress SMS Alert Order Notifications plugin <= 4.0.1 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
sms alert order notifications
- Versions
- ≥ 0, ≤ 4.0.1: Affected; ≥ 4.0.2: Not affected (custom)
Update to 4.0.2