Skip to content
OpenAdvisories

Vendor

sslplugins

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover

    SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public final_login_ajax_action handler resolves a user and issues an authenticated session by matching the wp_sslcare_otp table…