SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery

Explore SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery vulnerabilities across all versions. Currently tracking 19 known vulnerabilities, including severity, impact, and patch status.

01234567891018.12.2016Today02.08.20216.1SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting CVSS 6.1 · 02.08.202126.02.20244.3SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery CVSS 4.3 · 26.02.202428.10.20246.4SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode CVSS 6.4 · 28.10.202406.01.20258.8SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVSS 8.8 · 06.01.202523.02.20256.1SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Reflected Cross-Site Scripting CVSS 6.1 · 23.02.202502.03.20257.5SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection CVSS 7.5 · 02.03.202531.03.20259.8SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation CVSS 9.8 · 31.03.202508.05.20257.5SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Unauthenticated SQL Injection CVSS 7.5 · 08.05.202509.05.20256.4SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode CVSS 6.4 · 09.05.20258.8SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function CVSS 8.8 · 09.05.202515.08.20257.5SMS Alert Order Notifications <= 3.8.5 - Unauthenticated SQL Injection CVSS 7.5 · 15.08.202505.12.20255.3SMS Alert Order Notifications <= 3.8.8 - Missing Authorization CVSS 5.3 · 05.12.202518.02.20264.3SMS Alert Order Notifications <= 3.9.0 - Missing Authorization CVSS 4.3 · 18.02.202616.06.20265.3SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.3 - Missing Authorization CVSS 5.3 · 16.06.202630.06.20269.8SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset CVSS 9.8 · 30.06.202627.07.20264.9SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter CVSS 4.9 · 27.07.20269.8SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter CVSS 9.8 · 27.07.20264.4SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings CVSS 4.4 · 27.07.20264.9SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVSS 4.9 · 27.07.2026

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

19

Get automatic notifications for all SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery vulnerabilities before they are exploited.

Vulnerability Records

19 records
2026-07-27 18:24CVE-2026-15670
4.9
Medium
Wordfence PRISMYes
2026-07-27 18:23CVE-2026-15673
4.4
Medium
Wordfence PRISMYes
2026-07-27 18:22CVE-2026-15014
9.8
Critical
CivitasmassYes
2026-07-27 00:00CVE-2026-15671
4.9
Medium
Wordfence PRISMYes
2026-06-30 19:08CVE-2026-11387
9.8
Critical
Chloe ChamberlandYes
2026-06-16 00:00CVE-2026-54802
5.3
Medium
Jakub HermanYes
2026-02-18 00:00CVE-2026-32373
4.3
Medium
benzdeusYes
2025-12-05 00:00CVE-2025-66086
5.3
Medium
benzdeusYes
2025-08-15 00:00CVE-2025-49915
7.5
High
ChuongVNYes
2025-05-09 21:58CVE-2025-3878
6.4
Medium
wesley (wcraft)Yes
Showing 1–10 of 19 reports
SMS Alert – SMS &amp; OTP for WooCommerce, Order Notifications &amp; Abandoned Cart Recovery banner
Latestv3.9.8

SMS Alert – SMS &amp; OTP for WooCommerce, Order Notifications &amp; Abandoned Cart Recovery

Cozy Vision Technologies Pvt. Ltd.

Author

Cozy Vision Technologies Pvt. Ltd.

4.6(35)
92/100
Last Updated
2026-07-27 (3d ago)
Active Installs
3,000+
Downloads
307,083
Requires WP
4.6+
Requires PHP
5.6+
Tested up to
WP 7.0.2
Created
2016-12-18 (10y ago)

SMS Alert is a WooCommerce SMS plugin for OTP verification, order notifications, abandoned cart recovery, stock alerts, login with OTP, and SMS automation. It helps store owners: • Reduce fake COD orders • Recover lost sales • Improve customer communication • Send real-time SMS alerts This plugin requires an account with SMS Alert to send SMS messages. Demo accounts include free test credits. 🎥 Setup Video: Why Use WooCommerce SMS Notifications? Email open rates are declining. SMS messages have higher open and response rates. SMS Alert is built for WooCommerce workflows, including: • OTP verification • COD validation • Abandoned cart recovery • Multivendor notifications • Booking reminders • CRM-triggered SMS automation With WooCommerce SMS Alert, you can: ✔ Improve order confirmation reliability ✔ Reduce fake orders using OTP verification ✔ Recover abandoned carts via automated SMS ✔ Send low stock and back-in-stock alerts ✔ Enable login and registration with OTP ✔ Notify admins instantly about new orders Perfect For • eCommerce stores • Multivendor marketplaces • Booking websites • LMS websites • Membership sites • Indian WooCommerce stores requiring DLT compliant SMS Popular Use Cases • WooCommerce OTP verification • Login with OTP • Order status SMS alerts • Abandoned cart recovery SMS • DLT compliant SMS notifications • Multivendor WooCommerce SMS alerts • Booking confirmation SMS Core Features 📦 WooCommerce Order SMS Notifications • SMS alerts for new orders • Admin SMS notifications • SMS for all order statuses • Custom SMS templates • Dynamic order variables support 🔐 OTP Verification (One Time Password) • OTP for order confirmation • OTP only for COD orders (optional) • Login with OTP • Registration with OTP • Reset password with OTP • Role-based OTP verification • Limit resend attempts • Country-based OTP restriction 🛒 Abandoned Cart Recovery • Capture abandoned carts automatically • Send reminder SMS alerts • Recover lost sales • Track cart recovery performance • Compatible with block-based checkout 📢 Stock & Inventory Alerts • Low stock alert to admin • Out of stock alert • Back in stock notifier for customers • Real-time inventory SMS updates 📊 Campaign & Customer Sync • Sync customers to groups in SMS Alert dashboard • Send promotional SMS campaigns • Daily SMS balance report • Low balance alert 🧩 Developer Friendly Hooks available to: • Send SMS programmatically • Modify SMS content before sending • Capture SMS API responses • Extend WooCommerce SMS triggers Integrations Compatible with 50+ WordPress plugins including: • Form builder plugins • Booking and appointment plugins • Membership and CRM tools • Multivendor and WooCommerce extensions Form Builders 👨 Contact Form 7 to send notification to customer and admins, and verify mobile number through OTP 👨 Ninja Forms to send notification to customer and admins, and verify mobile number through OTP 👨 WPForms to send notification to customer and admins, and verify mobile number through OTP 👨 Fluent Forms to send notification to customer and admins, and verify mobile number through OTP 👨 Gravity Forms to send notification to customer and admins, and verify mobile number through OTP 👨 Elementor Website Builder to send notification to customer and admins, and verify mobile number through OTP 👨 Formidable Form Builder to send notification to customer and admins, and verify mobile number through OTP 👨 Forminator Contact form to send notification to customer and admins, and verify mobile number through OTP 👨 Metform Elementor Contact Form Builder to send notification to customer and admins 👨 Jetform to send notification to customer and admins 👨 Everest Forms to send notification to customer and admins, and verify mobile number through OTP 👨 Form Maker Plugin to send notification to customer and admins, and verify mobile number through OTP 👨 WS Form to send notification to customer and admins, and verify mobile number through OTP Membership, LMS & User Management 👨 UsersWP – User Registration & User Profile support mobile number verification via OTP during registration and allows users to log in using OTP instead of a password. 👨 LearnPress – WordPress LMS Plugin to send notifications to student and admin, and verify mobile number through OTP 👨 ARMember to send notification to users and admins, and verify mobile number through OTP 👨 Membership pro to send notification to users and admins, and verify mobile number through OTP and also send reminder notifications 👨 New User Approve to send notifications to users regarding their status updates. Booking Integrations 👨 WooCommerce Bookings to send booking confirmation to customers and admin, and also send reminder notifications. 👨 Booking Calendar to send booking confirmation to customers and admin, and also send reminder notifications. 👨 Bookit Calendar to send booking confirmation to customers and admin, and also send reminder notifications. 👨 Easy Appointments to send appointment confirmation to customers and admin, and also send reminder notifications. 👨 Amelia Booking Plugin to send booking confirmation to customers and admin, and also send reminder notifications. 👨 Simply Schedule Appointments Booking Plugin to send appointment confirmation to customers and admin, and also send reminder notifications. 👨 Quick Restaurant Reservation to send booking confirmation to customers and admin, and also send reminder notifications. 👨 Five Star Restaurant Reservations to send booking confirmation to customers and admin, and also send reminder notifications. 👨 gAppointments to send appointment confirmation to customers and admin, and also send reminder notifications. 👨 salon booking system to send appointment confirmation to customers and admin, and also send reminder notifications. 👨 Booknetic to send appointment confirmation to customers and admin, and also send reminder notifications. CRM & Marketing 👨 Fluent CRM to send automated notifications to customers and admins 👨 WP ERP to send automated notifications to customers and admins 👨 Jetpack CRM to send automated notifications to customers and admins 👨 Uncanny Automator to send automated notifications to customers and admins 👨 Groundhogg to send automated notifications to customers and admins 👨 Wp Fusion plugin to capture the data in smsalert group Marketplace, Affiliates & Community 👨 Affiliates Manager to send notification to Affiliates and admin 👨 WP adverts to send notification to author, customers and admin, and also send reminder notifications 👨 WPCafe plugin to send notification to author, customers and admin, and also send reminder notifications WooCommerce Extensions 👨 Product Vendors 👨 Returns and Warranty Requests to send RMA status update to customer 👨 WooCommerce Subscriptions 👨 Delivery Drivers for WooCommerce to send notifications to drivers and verify the order with an OTP during delivery. 👨 Woocommerce Simple Auctions 👨 WP Loyalty to send notifications to customers 👨 TeraWallet – For WooCommerce to send credit and debit transaction notifications to customers. Support & Helpdesk 👨 awesome support to send notifications to customers and admin Digital Store Integrations 👨 Easy Digital Downloads to send support notifications to customers and admins, and verify mobile number through OTP Events & Travel Integrations 👨 Events Manager to send event booking confirmation to customer and admin 👨 WP Travel Engine to send event booking confirmation to customer and admin, and verify mobile number through OTP And many more. Compatibility 👉 Sequential Order Numbers Pro to send notifications to customers and admin 👉 WooCommerce Order Status Manager to send notifications to customers and admin 👉 Admin Custom Order Fields to send notifications to customers and admin 👉 Shipment Tracking to send delivery notifications to customers and admin 👉 Advanced Shipment Tracking for WooCommerce to send delivery notifications to customers and admin 👉 Aftership – WooCommerce Tracking to send delivery notifications to customers and admin 👉 Ultimate Member to verify mobile number through OTP 👉 Member Mouse to send notifications to customers, and admins, and also send reminder notifications. 👉 Pie Register to verify mobile number through OTP 👉 WP-Members Membership Plugin 👉 User Registration to verify mobile number through OTP 👉 Easy Registration Forms 👉 RegistrationMagic Plugin to verify mobile number through OTP 👉 Profile Builder to verify mobile number through OTP 👉 Buddypress to verify mobile number through OTP and Login With OTP 👉 Dokan Multivendor Marketplace to send notifications to vendor and verify their number during signup. 👉 MultiVendorX Marketplace to send notifications to vendor and verify their number during signup. 👉 WooCommerce PDF Invoices & Packing Slips to send notifications to customers and admin 👉 Claim GST for Woocommerce to send notifications to customers and admin 👉 Order Delivery Date for WooCommerce to send notifications to customers and admin 👉 WooCommerce Multi-Step Checkout 👉 WooCommerce Serial Numbers to send notifications to customers and admin 👉 Return Refund and Exchange For WooCommerce to send notifications to customers and admin 👉 Local Pickup Plus to send notifications to store manager 👉 Raffle ticket generator to send notifications to customers and admin Support We provide 24&#215;7 email support for this plugin • Email support: support@cozyvision.com • Feature requests: WordPress support forum This plugin requires an account with SMS Alert to send SMS messages. Translation Plugins Support WPML Loco Translate

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C