Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-32373 EUVD-2026-11872

WordPress SMS Alert Order Notifications plugin <= 3.9.0 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.9.0.

Affected products

VendorProductAffectedFixed
Cozy Vision SMS Alert Order Notifications ≤ 3.9.0 —

References