CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a playground environment. This makes it possible for unauthenticated attackers to spoof the Host header to make the OTP code "1234" and authenticate as any user, including administrators.
Explanation of Vulnerability in Simple Terms
The SMS Alert plugin for WooCommerce contains an authentication bypass vulnerability affecting versions up to 3.7.9. An attacker can exploit this flaw to gain unauthorized access to the plugin's functionality without providing valid credentials. This allows complete compromise of the plugin's features, including SMS sending and order notification systems. All users should update immediately.
What an attacker can do
Bypass authentication and gain full control of the plugin's SMS and notification features without valid credentials.
Potential impact on your site
Attackers can send unauthorized SMS messages, intercept order notifications, and manipulate abandoned cart recovery campaigns.
Conditions required to exploit
Network access only; no authentication, user interaction, or special configuration required.
Key dates
External resources
