Login Request a demo
SA
Product
SMS Alert
by · last CVE Oct 10, 2026
4
CVEs
0
On KEV
8.1
Max CVSS
3
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 1
Severity
All severities4Critical0High3Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SMS Alert to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-94257
8.1
0%
Oct 10
SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
Affected: 3.9.6 before 4.0.1
CVE-2026-94256
8.1
0%
Oct 10
SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP
Affected: 4.0.0 before 4.0.1
CVE-2026-15206
7.5
0%
Aug 2
SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile
Affected: before 3.9.8
CVE-2026-94258
2.7
0%
Oct 8
SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
Affected: 3.6.4 before 4.0.1
Showing 4