Skip to content
OpenAdvisories

Vendor

clicksend

2 known vulnerabilities.

Products

SMS Contact Form 7 Notifications by ClickSend 1 SMS for Lead Capture Forms 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-62915

    WordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clicksend-contactform7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Contact Form 7 Notifications by ClickSend: fro…

    clicksend SMS Contact Form 7 Notifications by ClickSend
  • Medium 4.3
    CVE-2024-11353

    SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

    The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_message() function in all versions up to, and including, 1.1.0. This makes it possible for authenticated att…

    clicksend SMS for Lead Capture Forms Web / CMS