SMSify

SMSify has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for SMSify has a vendor fix available, so running the current release closes it.

All of these findings were reported by Kévin Mosbahi (Mika). SMSify is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all SMSify vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-54324

SMSify <= 6.0.4 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv6.1.2
5.0(1)
100/100
Last Updated
2025-02-25 (2y ago)
Active Installs
10+
Downloads
7,086
Requires WP
5.3+
Requires PHP
7.3+
Tested up to
WP 6.7.7
Created
2012-10-23 (14y ago)

Introducing the all-new SMSify! This amazing WordPress plugin lets you keep your users informed with personalised and automated messages, right to their phones. Stay connected with your customers in a heartbeat. SMSify can send and receive text messages, schedule notifications of new products or sales events and so much more – without having to set up any external services. That’s right – all within your own WordPress dashboard. But wait, there’s more! You don’t need piles of contacts stored in your phone; simply import them into SMSify with a csv file! And what’s more, it integrates perfectly with Contact Form 7. We’ve designed this brand new plugin with convenience in mind, making it simpler than ever to stay in touch with your users. Say goodbye to long and tedious settings menus! Take control of your notifications like a pro – just by using SMSify’s custom-made WordPress interface. All screenshots provided to show exactly how easy this powerful plugin is to use. Don’t miss out on the biggest time saver of 2023, get our premium plugin now – you won’t be disappointed! Full list of benefits: Keep your customers and users informed with personalised and automated messages, right to their phones. Send and receive text messages, schedule notifications of new events, reminders and so much more – without having to set up any external services. Stay connected with your users in a heartbeat. Delight your users with insanely good support. All within WordPress! Requirements Modern web browser such as Google Chrome, Firefox and Safari.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C