Access violation vulnerability in SMS Alert Order Notifications – WooCommerce 3.7.6

The SMS Alert Order Notifications – WooCommerce plugin for WordPress has a security issue where unauthorized people can change important information without permission. This can allow them to gain more control and access to the website. Any version up to 3.7.6 is affected by this problem. This means that attackers who have an account on the website can change certain settings and make themselves administrators, giving them full control over the site. It’s important to note that this can only happen if the woocommerce-warranty plugin is also installed.

Detected in:

SMS Alert Order Notifications – WooCommerce fixed vulnerable versions: >= * <= 3.7.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.