WP SMS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WS

Product

WP SMS

by VeronaLabs · last CVE Jun 15, 2026

14

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 1High 3Medium 10Low 0

Severity

All severities14 Critical1 High3 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP SMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-40790	6.5	0%	Jun 15	WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability Affected: through 7.2.1
CVE-2024-24881	6.1	0%	Feb 8	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce,… Affected: before 6.5.3
CVE-2023-32742	6.1	0%	Aug 30	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions Affected: through 6.1.4
CVE-2026-25343	5.9	0%	Feb 19	WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability Affected: through 7.1
CVE-2025-62006	5.4	0%	Oct 22	WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability Affected: through 7.0.1
CVE-2024-25920	5.4	0%	Mar 27	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a… Affected: before 6.4
CVE-2021-24561	5.4	1%	Aug 23	The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored… Affected: before 5.4.13
CVE-2023-6981	4.9	0%	Jan 3	The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all… Affected: before 6.5.1
CVE-2024-34811	4.8	0%	May 14	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a… Affected: before 6.5.2
CVE-2023-6980	4.3	0%	Jan 3	The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… Affected: before 6.5.1