Vulnerabilities / WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce
WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce vulnerabilities
Advisories WPSec published for WSMS (formerly WP SMS): SMS Notifications, OTP Login and WooCommerce SMS. Other sources may list more. Its attack surface: WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2241 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce <= 7.2.10 - Authenticated (Contributor+) Insecure Direct Object Reference to WooCommerce Customer Phone Number Disclosure via 'post' and 'id' Parameters | Medium 4.3 | 7.2.11 |
License: CC BY 4.0