| CVE-2026-94256 |
The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified…
|
8.1
Élevée
|
10 oct. 2026 |
| CVE-2026-94257 |
SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
|
8.1
Élevée
|
10 oct. 2026 |
| CVE-2026-94258 |
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the…
|
2.7
Faible
|
8 oct. 2026 |
| CVE-2026-15206 |
The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that…
|
7.5
Élevée
|
2 août 2026 |