Veronalabs Wp Sms vulnerabilities

• veronalabs wp sms WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability CVE-2024-43331 5.3 MediumAugust 22, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-34811 5.9 MediumMay 13, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30454 4.3 MediumMarch 29, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-25920 6.5 MediumMarch 27, 2024
• mostafas1990 wp sms – messaging & sms notification for wordpress, woocommerce, gravityforms, etc, veronalabs wp sms +1 more WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24881 7.1 HighFebruary 8, 2024
• veronalabs wp sms, wsms (formerly wp sms) – sms & mms notifications with otp and 2fa for woocommerce +1 more WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting CVE-2023-6981 6.1 MediumJanuary 3, 2024
• veronalabs wp sms, wsms (formerly wp sms) – sms & mms notifications with otp and 2fa for woocommerce +1 more WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion CVE-2023-6980 4.3 MediumJanuary 3, 2024
• mostafas1990 wp sms – messaging & sms notification for wordpress, woocommerce, gravityforms, etc, veronalabs wp sms +1 more WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure CVE-2023-27447 5.3 MediumDecember 28, 2023
• veronalabs wp sms WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32742 7.1 HighAugust 30, 2023
• unknown wp sms WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting CVE-2021-24561 5.4 MediumAugust 23, 2021