CVE-2026-116386

WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability

CRITICAL 9.8

CVSS 3.1Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublished: 2026-10-30 18:30 UTCUpdated: 2026-10-30 18:50 UTCAssigner: Patchstack

Description

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.

Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications