Vulnerabilidades do VeronaLabs WP SMS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam VeronaLabs WP SMS: 4 registro(s), com versões afetadas e correções.

CVE-2026-40790 Média · 6.5 CWE-288 15/06/2026

WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.

CVE-2026-28136 Alta · 7.6 CWE-89 26/02/2026

WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through <= 6.9.12.

CVE-2026-25343 Média · 5.9 CWE-79 19/02/2026

WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS wp-sms allows DOM-Based XSS.This issue affects WP SMS: from n/a through <= 7.1.

CVE-2025-62006 Média · 5.4 CWE-862 22/10/2025

WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through <= 7.0.1.