CVE-2025-47682

CVE-2025-47682 is a critical SQL Injection vulnerability affecting Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce plugin versions up to and including 3.8.2. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise of the affected system. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.