Medium · 5.3 CVE-2023-27447 EUVD-2023-31223GHSA-jf57-3c97-v2x5

WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: VeronaLabs Product: WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc Category: Web / CMS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This issue affects WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc: from n/a through 6.0.4.

Affected products

Vendor	Product	Affected	Fixed
VeronaLabs	WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc	≤ 6.0.4	—

References

https://patchstack.com/database/vulnerability/wp-sms/wordpress-wp-sms-plugin-6-0-4-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry