Wp Sms
Vendor:
First CVE: Aug 23, 2021 · Active for 4 years
14
Total CVEs
More Total CVEs than 92% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 30% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wp Sms over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 23, 2021
4 years ago
Most Recent CVE
Jun 15, 2026
43 days ago
CVE Severity & Scoring
Wp Sms14 CVEs
71%
21%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (42.9%)
Unknown0 (0.0%)
Required8 (57.1%)
Privileges Required
Low4 (28.6%)
High4 (28.6%)
None6 (42.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-43331CRITICAL Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.9.3. | Aug 22, 2024 | 9.8 | 29 | NO | NO |
CVE-2026-28136HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from | Feb 26, 2026 | 7.6 | 26 | NO | NO |
CVE-2026-40790MEDIUM Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. | Jun 15, 2026 | 6.5 | 24 | NO | NO |
CVE-2024-30454HIGH Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2. | Mar 29, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-27447HIGH Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This issu | Dec 28, 2023 | 7.5 | 22 | NO | NO |
CVE-2026-25343MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS wp-sms allows DOM-Based XSS.This issue affects WP SMS: from | Feb 19, 2026 | 5.9 | 19 | NO | NO |
CVE-2025-62006MEDIUM Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through <= 7.0.1. | Oct 22, 2025 | 5.4 | 19 | NO | NO |
CVE-2021-24561MEDIUM The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-S | Aug 23, 2021 | 5.4 | 19 | NO | NO |
CVE-2024-24881MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, G | Feb 8, 2024 | 6.1 | 17 | NO | NO |
CVE-2023-32742MEDIUM Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions. | Aug 30, 2023 | 6.1 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Wp Sms
Top CWEs
Versions
No cataloged versions.