Vulnerabilities / SMS Alert
SMS Alert vulnerabilities
Advisories WPSec published for SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery. Other sources may list more. Its attack surface: SMS Alert on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-04 | WPSEC-2026-0414 | SMS Alert <= 4.0.0 - Unauthenticated OTP Verification Bypass via Form Submission | Medium 5.3 | 4.0.1 |
| 2026-10-04 | WPSEC-2026-0413 | SMS Alert <= 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP | High 8.1 | 4.0.1 |
License: CC BY 4.0