VeronaLabs WP SMS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting VeronaLabs WP SMS: 4 record(s), with affected versions and fixes.

CVE-2026-40790 Medium · 6.5 CWE-288 Jun 15, 2026

WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.

CVE-2026-28136 High · 7.6 CWE-89 Feb 26, 2026

WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through <= 6.9.12.

CVE-2026-25343 Medium · 5.9 CWE-79 Feb 19, 2026

WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS wp-sms allows DOM-Based XSS.This issue affects WP SMS: from n/a through <= 7.1.

CVE-2025-62006 Medium · 5.4 CWE-862 Oct 22, 2025

WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through <= 7.0.1.