WS
Product
WP SMS
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 10Low 0
Watch
Add WP SMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43331 | 9.8 | Aug 22 | Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.9.3 Affected: before 6.9.4 |
| CVE-2024-30454 | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2 Affected: before 6.6.3 |
| CVE-2026-28136 | 7.6 | Feb 26 | WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability Affected: through 6.9.12 |
| CVE-2023-27447 | 7.5 | Dec 28 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This… Affected: before 6.0.4.1 |
| CVE-2026-40790 | 6.5 | Jun 15 | WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability Affected: through 7.2.1 |
| CVE-2024-24881 | 6.1 | Feb 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce,… Affected: before 6.5.3 |
| CVE-2023-32742 | 6.1 | Aug 30 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions Affected: through 6.1.4 |
| CVE-2026-25343 | 5.9 | Feb 19 | WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability Affected: through 7.1 |
| CVE-2025-62006 | 5.4 | Oct 22 | WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability Affected: through 7.0.1 |
| CVE-2024-25920 | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a… Affected: before 6.4 |
| CVE-2021-24561 | 5.4 | Aug 23 | The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored… Affected: before 5.4.13 |
| CVE-2023-6981 | 4.9 | Jan 3 | The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all… Affected: before 6.5.1 |
| CVE-2024-34811 | 4.8 | May 14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a… Affected: before 6.5.2 |
| CVE-2023-6980 | 4.3 | Jan 3 | The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… Affected: before 6.5.1 |
Showing 14