VendorsVeronaLabswp_smsany version
Vulnerabilities

VeronaLabs WP SMS any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2024-43331
WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability
Published 2024-08-22 · Analyzed
9.8EPSS 0.004
CVE-2024-30454
WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-03-29 · Modified
8.8EPSS 0.002
CVE-2023-27447
WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure
Published 2023-12-28 · Modified
7.5EPSS 0.005
CVE-2023-32742
WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-30 · Analyzed
7.1EPSS 0.004
CVE-2024-24881
WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-08 · Modified
7.1EPSS 0.004
CVE-2024-25920
WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2023-6981
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Published 2024-01-03 · Modified
6.1EPSS 0.004
CVE-2024-34811
WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-05-13 · Modified
5.9EPSS 0.004
CVE-2021-24561
WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting
Published 2021-08-23 · Analyzed
5.4EPSS 0.007
CVE-2023-6980
WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion
Published 2024-01-03 · Modified
4.3EPSS 0.002