CVE-2026-116386 WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability
CriticalCVSS 9.8
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications | < 4.0.3 | 4.0.3 |
| wordpress sms-alert(WordPress) | < 4.0.3 | 4.0.3 |
References
- patchstack.com vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org