Cozy Vision vulnerabilities
Published CVEs affecting Cozy Vision products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-32373
Medium · 5.4
CWE-862 Mar 13, 2026
WordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.9.0.
CVE-2025-66086
Medium · 5.3
CWE-862 Nov 21, 2025
WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.8.
CVE-2025-49915
Critical · 9.3
CWE-89 Oct 22, 2025
Cozy Vision SMS Alert Order Notifications (sms-alert) SQL Injection in WordPress Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.5.