CVE ID :CVE-2026-11387 Published : July 1, 2026, 7:53 a.m. | 5 hours, 19 minutes ago Description :The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-11387 - SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

VERWANDTEARTIKEL

USN-8488-1: Linux kernel vulnerabilities

CVE-2026-2891 - Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service

CVE-2026-45247 in Mirasvit Full Page Cache Warmer aktiv ausgenutzt

CVE-2026-23537 - Feast: unauthenticated arbitrary file write

CVE-2026-57692 - WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability

CVE-2026-5136 - Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation