agentprime: cozyvision1-sms-alert-sms-otp-for-woocommerce-order-notifications-abandoned-cartEvery new CVE for cozyvision1-sms-alert-sms-otp-for-woocommerce-order-notifications-abandoned-cart.https://agentprime.io/CVE-2026-15673: SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settingshttps://agentprime.io/advisories/CVE-2026-15673/https://agentprime.io/advisories/CVE-2026-15673/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 06:54:36 GMTCVECVE-2026-15670: SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-15670/https://agentprime.io/advisories/CVE-2026-15670/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 06:54:35 GMTCVECVE-2026-15671: SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameterhttps://agentprime.io/advisories/CVE-2026-15671/https://agentprime.io/advisories/CVE-2026-15671/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 06:54:35 GMTCVECVE-2026-15014: SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameterhttps://agentprime.io/advisories/CVE-2026-15014/https://agentprime.io/advisories/CVE-2026-15014/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 06:54:34 GMTCVEcriticalCVE-2026-11387: SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Resethttps://agentprime.io/advisories/CVE-2026-11387/https://agentprime.io/advisories/CVE-2026-11387/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 07:53:37 GMTCVEcriticalCVE-2025-3878: SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcodehttps://agentprime.io/advisories/CVE-2025-3878/https://agentprime.io/advisories/CVE-2025-3878/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 May 2025 11:22:46 GMTCVECVE-2025-3876: SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Functionhttps://agentprime.io/advisories/CVE-2025-3876/https://agentprime.io/advisories/CVE-2025-3876/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 May 2025 11:22:45 GMTCVECVE-2024-13553: SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-13553/https://agentprime.io/advisories/CVE-2024-13553/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 11:12:28 GMTCVEcriticalCVE-2024-11725: SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Updatehttps://agentprime.io/advisories/CVE-2024-11725/https://agentprime.io/advisories/CVE-2024-11725/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 06:40:56 GMTCVECVE-2024-10233: SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcodehttps://agentprime.io/advisories/CVE-2024-10233/https://agentprime.io/advisories/CVE-2024-10233/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 11:01:35 GMTCVECVE-2024-1489: SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2024-1489/https://agentprime.io/advisories/CVE-2024-1489/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:27:22 GMTCVE