cleantalk
Vulnerabilities and Security Researches

SMS Alert Order Notifications – WooCommerce, CVE-2025-47682

CVE, Research URL

CVE-2025-47682

Home page URL

Security reports for SMS Alert Order Notifications – WooCommerce

Application

SMS Alert Order Notifications – WooCommerce

Published on
May 13, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce allows SQL Injection.This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.8.2.
Affected versions
Min -, max 3.8.2.
Status
vulnerable
Previous vulnerability researches
WP Last Modified Info (CVE-2024-6864) , Aug 21, 2024
WP Last Modified Info (cf2c92fbf1bee09f0bae8aa3766d1fc64b84a72e) , Jun 07, 2024
New vulnerability
Frontend Dashboard (CVE-2025-4474) , May 14, 2025
Frontend Dashboard (CVE-2025-4473) , May 14, 2025
Easy FancyBox – WordPress Lightbox Plugin (CVE-2025-3597) , May 14, 2025
Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease! (CVE-2025-26841) , May 14, 2025
SMS Alert Order Notifications – WooCommerce (CVE-2025-47682) , May 14, 2025