Vulnerabilidades de Cozy Vision
CVEs publicadas que afetam produtos de Cozy Vision: 3 registro(s), com severidade, exploração e correções.
CVE-2026-32373
Média · 5.4
CWE-862 13/03/2026
WordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.9.0.
CVE-2025-66086
Média · 5.3
CWE-862 21/11/2025
WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.8.
CVE-2025-49915
Crítica · 9.3
CWE-89 22/10/2025
Injeção de SQL no plugin WordPress SMS Alert Order Notifications (sms-alert) da Cozy Vision
Neutralização imprópria de elementos especiais usados em um comando SQL ('SQL Injection') em vulnerabilidade na Cozy Vision SMS Alert Order Notifications sms-alert permite SQL Injection. Este problema afeta SMS Alert Order Notifications: de n/a até <= 3.8.5.