CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

CriticalCWE-266 All CVEs

Weakness

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

References

https://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-3-9-7-privilege-escalation-vulnerability?_s_id=cve

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.

Start a free audit See pricing