| CVE-2026-94256 |
The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified…
|
8.1
High
|
Oct 10, 2026 |
| CVE-2026-94257 |
SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
|
8.1
High
|
Oct 10, 2026 |
| CVE-2026-94258 |
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the…
|
2.7
Low
|
Oct 8, 2026 |
| CVE-2026-15206 |
The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that…
|
7.5
High
|
Aug 2, 2026 |