CVE-2026-95594

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-4-0-0-privilege-escalation-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-266

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab1d
🚨 HIGH SEVERITY: CVE-2026-95594 (CVSS 8.1) Unauthenticated privilege escalation in SMS Alert Order Notifications plugin ≤ v4.0.0. No authentication required for exploitation. WordPress admins: Update immediately! #CVE #Vulnerability #PatchNow https://t.co/RaqWeLMK74
0000042
159 followersView on X

Explore more

Back to dashboard