High · 7.6 CVE-2023-50843 EUVD-2023-55576GHSA-5j49-8vfq-6j67

WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Clockwork Product: Clockwork SMS Notfications

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4.

Affected products

Vendor	Product	Affected	Fixed
Clockwork	Clockwork SMS Notfications	≤ 3.0.4	—

References

https://patchstack.com/database/vulnerability/mediaburst-email-to-sms/wordpress-clockwork-sms-notfications-plugin-3-0-4-sql-injection-vulnerability?_s_id=cve vdb-entry