Cyberlord92 Miniorange OTP Verification And SMS Notification For Woocommerce vulnerabilities

1 vulnerability

Known vulnerabilities in Cyberlord92 Miniorange OTP Verification And SMS Notification For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2025-14948cyberlord92miniorange otp verification and sms notification for woocommerce+1
EPSS score
0.27%
The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `enable_wc_sms_notification` AJAX action in all versions up to, and including, 4.3.8. This makes it possible for unauthenticated attackers to enable or disable SMS notification settings for WooCommerce orders.