Cozyvision1 vulnerabilities

Products

• Sms Alert – Sms & Otp For Woocommerce, Order Notifications & Abandoned Cart Recovery 11

Newest

• cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings CVE-2026-15673 4.4 MediumJuly 28, 2026
• cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter CVE-2026-15671 4.9 MediumJuly 28, 2026
• cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVE-2026-15670 4.9 MediumJuly 28, 2026
• cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter CVE-2026-15014 9.8 CriticalJuly 28, 2026
• cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset CVE-2026-11387 Public exploit 9.8 CriticalJuly 1, 2026
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode CVE-2025-3878 6.4 MediumMay 10, 2025
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function CVE-2025-3876 8.8 HighMay 10, 2025
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation CVE-2024-13553 9.8 CriticalApril 1, 2025
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVE-2024-11725 8.8 HighJanuary 7, 2025
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode CVE-2024-10233 6.4 MediumOctober 29, 2024
• cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 more SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery CVE-2024-1489 4.3 MediumMarch 13, 2024