TextMe SMS

TextMe SMS has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 7.4 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for TextMe SMS has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. TextMe SMS is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all TextMe SMS vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.4

TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-04-03 00:00	TextMe SMS <= 1.9.1 - Missing Authorization TextMe SMS <= 1.9.1	`CVE-2025-31789`	6.5 Medium	Thái An	Yes
2023-11-23 00:00	TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page() TextMe SMS <= 1.9.0	`CVE-2023-48287`	4.3 Medium	Arvandy	Yes
2021-08-24 00:00	TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting TextMe SMS < 1.8.9	`N/A`	7.4 High	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv2.1.8

TextMe SMS

Author

Matat Technologies

4.0(4)

80/100

Last Updated

2026-09-06 (7d ago)

Active Installs

500+

Downloads

19,901

Requires WP

6.1+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2016-06-21 (10y ago)

TextMe SMS Integration allows you to send SMS messages from your WordPress site using the TextMe SMS gateway service. Features: Send SMS notifications for WooCommerce orders Contact Form 7 integration Elementor Forms integration User registration SMS notifications Admin OTP/2FA for secure logins Phone number login shortcodes Out of stock notifications Balance monitoring with email alerts WooCommerce Integration: New order notifications (customer and admin) Order complete notifications Order cancelled notifications Pending payment reminders Custom order status notifications Customer notes via SMS Login Security: Two-factor authentication via SMS OTP Phone number login support International phone number support

View on WordPress.org