Cozyvision1

6 CVEs across 1 Cozyvision1 products. Browse Cozyvision1 vulnerabilities, severities, and proof-of-concept exploits.

Cozyvision1 products with known CVEs

ProductCVEs
Sms Alert – Sms & Otp For Woocommerce, Order Notifications & Abandoned Cart Recovery11
Cozyvision1 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15673Medium4.42026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'check…
CVE-2026-15671Medium4.92026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via the 'i…
CVE-2026-15670Medium4.92026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to time-based SQL Injection via the…
CVE-2026-15014Critical9.82026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to…
CVE-2026-11387Critical9.82026-07-01The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account…
CVE-2025-3878Medium6.42025-05-10The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_verify shortcode in all v…
CVE-2025-3876High8.82025-05-10The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handl…
CVE-2024-13553Critical9.82025-04-01The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and incl…
CVE-2024-11725High8.82025-01-07The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation d…
CVE-2024-10233Medium6.42024-10-29The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_subscribe shortcode in al…
CVE-2024-1489Medium4.32024-03-13The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.9. T…