WordPress security by component

SMS for WooCommerce

Plugin description

SMS for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 17, 2024; the highest CVE/CNA score is 6.1.

Plugin slug: wc-sms

Latest vulnerability

CVE-2024-12220: SMS for WooCommerce: Cross-site request forgery

SMS for WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedDec 17, 2024

Safe version guidanceSee mitigation notes

		Safe version
Dec 17, 2024	CVE-2024-12220 SMS for WooCommerce: Cross-site request forgery SMS for WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE6.1 NVDPending