SZB-a172dcbc76
EUVD lists unauthenticated privilege escalation in SMS Alert Order Notifications 4.0.2 and earlier
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Cozy Vision Technologies Pvt. Ltd.
- Product
- SMS Alert Order Notifications
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114303, as relayed in a Mastodon post, describes an unauthenticated privilege escalation flaw in SMS Alert Order Notifications versions up to 4.0.2. The entry gives a CVSS v3.1 score of 9.8 and was last updated 2026-10-30.
If you use Cozy Vision Technologies Pvt. Ltd.
Update SMS Alert Order Notifications to a version later than 4.0.2 if one is available
Audit WordPress user accounts for unexpected administrator or elevated roles
Deactivate the plugin if no fixed version is available
What the sources say 1
· Mastodon: “Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.” Source