Advisories · Technology

SMS Alert.

Every CVE that names SMS Alert among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94257 CVE record

CVSS 8.1 High

SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
- SMS Alert
- Privilege escalation
Not analysed yet 10 Oct 2026
CVE-2026-94256 CVE record

CVSS 8.1 High

SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP
- SMS Alert
- Authentication bypass
Not analysed yet 10 Oct 2026
CVE-2026-94258 CVE record

CVSS 2.7 Low

SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
- SMS Alert
- Information disclosure
Not analysed yet 8 Oct 2026
CVE-2026-15206 CVE record

CVSS 7.5 High

SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile
- SMS Alert
- Authentication bypass
Not analysed yet 2 Aug 2026