SSL Wireless SMS Notification

SSL Wireless SMS Notification has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 8.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high.

The most common weakness is Incorrect Privilege Assignment, behind 1 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 2 issues recorded for SSL Wireless SMS Notification has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. SSL Wireless SMS Notification is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSHigh

8.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SSL Wireless SMS Notification vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-56220

SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

2 records


2025-01-03 00:00	SSL Wireless SMS Notification <= 3.5.0 - Unauthenticated SQL Injection SSL Wireless SMS Notification <= 3.5.0	`CVE-2024-56284`	7.5 High	LVT-tholv2k	Yes
2024-12-19 00:00	SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation SSL Wireless SMS Notification <= 3.6.0	`CVE-2024-56220`	9.8 Critical	Bonds	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv3.8.1

SSL Wireless SMS Notification

Author

sslplugins

0.0(0)

0/100

Last Updated

2025-05-12 (1y ago)

Active Installs

70+

Downloads

4,125

Requires WP

5.0+

Requires PHP

7.2+

Tested up to

WP 6.7.7

Created

2020-07-11 (6y ago)

This is the official Woocommerce SMS Notification Plugin of SSL Wireless. SSL Wireless has helped launch Mobile VAS and SMS Banking for the first time in Bangladesh, which has transformed into mobile financial services today. SSL is one of the key players behind popularizing value-added services, e-commerce & fintech services in the telecom and financial sector over the past decade that are used by millions of people today. * Easy to install! * Reporting Panel Prerequisites WordPress 5.x.x WooCommerce 4.2.x cURL php extension. Plugin Configuration Open Admin Panel. [Check Screenshot-1] Navigate to SSL Wireless tab. [Check Screenshot-2] Enable plugin, select platform(ISMS or ISMSPlus), Use your API Hash(Only for ISMSPlus), Use your panel credential as API User/Password(Only for ISMS), Use SID for both platform. Set the SMS Alert & SMS Template. You can also set an Admin phone number and SMS template. If you want to get alert on every successful order. If you want to use the OTP Login Register Feature go to the OTP Login Register Menu under SSL Wireless Menu in the Admin Panel. Follow the Guidelines from there. This feature works with Woocommerce My Account. License GPL3

View on WordPress.org