SecAlerts
cozyvision logo

cozyvision

Security Risk Profile

57
/100
medium

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from September 6, 2021 to present

10
Total CVEs
6
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
57/100
medium

Severity Distribution

Critical
3
High
3
Medium
4
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
3

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
SQL Injection
2
3
CSRF
1

Most Affected Products

1. Cozyvision Sms Alert Order Notifications Wordpress10
2. WooCommerce SMS Alert Order Notifications4
3. WordPress SMS Alert Order Notifications – WooCommerce3
4. Cozy Vision SMS Alert Order Notifications – WooCommerce2
5. Cozy Vision Technologies SMS Alert Order Notifications – WooCommerce1

Recent Vulnerabilities

See more →
CVE-2025-47682
CVSS 9.8EPSS 0%critical

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability

5/12/2025🔧 No Patch
CVE-2025-3878
CVSS 6.4medium

SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode

5/10/2025
CVE-2025-3876
CVSS 8.8high

SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function

5/10/2025
CVE-2024-13553
CVSS 9.8critical

SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation

4/1/2025
CVE-2025-26984
CVSS 7.1EPSS 0%high

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

3/3/2025
CVE-2025-26988
CVSS 9.3EPSS 0%critical

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

3/3/2025
CVE-2024-11725
CVSS 8.8high

SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

1/7/2025
CVE-2024-10233
CVSS 6.4medium

SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode

10/29/2024
CVE-2024-1489
CVSS 4.3medium

SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery

3/13/2024
CVE-2021-24588
CVSS 6.1medium

SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting

9/6/2021🔧 No Patch

Monitor cozyvision in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

cozyvision Security Vulnerabilities & Risk Score | 10 CVEs | SecAlerts - SecAlerts