N/A
2026-04-23< 7.2.2
WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce <= 7.2.1 - Authenticated (Subscriber+) Information Exposure
WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce
Minimum safe version
7.2.2
Update to 7.2.2 or later to address 22 fixable vulnerabilities
Latest available7.2.4 ✓
High 7.6
2026-02-26< 7.0
CVE-2026-28136
Medium 5.9
2026-02-19< 7.1.1
CVE-2026-25343
Medium 5.4
2025-10-22< 7.0.2
CVE-2025-62006
Critical 9.8
2024-08-22< 6.9.4
CVE-2024-43331
Medium 4.8
2024-05-13< 6.5.2
CVE-2024-34811
N/A
< 6.5.2
WP SMS < 6.5.2 - Contributor+ Stored Cross-Site Scripting
Medium 4.3
2024-03-29< 6.6.3
CVE-2024-30454
Medium 6.5
2024-03-27< 6.4
CVE-2024-25920
High 7.1
2024-02-08< 6.5.3
CVE-2024-24881
N/A
2024-01-15< 6.5.2
WordPress WP SMS Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)
N/A
2024-01-12< 6.5.2
WP SMS <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 4.9
2024-01-03< 6.5.1
CVE-2023-6981
Medium 4.3
2024-01-03< 6.5.1
CVE-2023-6980
N/A
< 6.2.0
WP SMS < 6.2.0 - User Unsubscribe via CSRF
N/A
< 5.4.9.1
WP SMS < 5.4.9.1 - Reflected Cross-Site Scripting (XSS)
N/A
2023-07-07< 6.2.0
WP SMS <= 6.1.5 - Cross-Site Request Forgery
High 7.1
2023-08-30< 6.1.5
CVE-2023-32742
Medium 5.3
2023-12-28< 6.2.0
CVE-2023-27447
N/A
2021-06-30< 5.4.9.1
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc <= 5.4.9 - Reflected Cross-Site Scripting
N/A
2021-06-30< 5.4.9.1
WordPress WP SMS plugin <= 5.4.9 - Reflected Cross-Site Scripting (XSS) vulnerability
Medium 5.4
2023-03-02< 5.4.13
WordPress WP SMS Plugin < 5.4.13 is vulnerable to Cross Site Scripting (XSS)