CVE-2025-66086: WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66086?
CVE-2025-66086 is classified as a missing authorization vulnerability that could lead to unauthorized access due to incorrectly configured access control security levels.
How do I fix CVE-2025-66086?
To fix CVE-2025-66086, ensure that proper access control measures are implemented in Cozy Vision SMS Alert Order Notifications by updating to the latest version or applying security patches.
What versions of Cozy Vision SMS Alert Order Notifications are affected by CVE-2025-66086?
CVE-2025-66086 affects Cozy Vision SMS Alert Order Notifications versions up to and including 3.8.8.
Is CVE-2025-66086 exploitable remotely?
Yes, CVE-2025-66086 can be exploited remotely due to the improper access controls allowing unauthorized actions.
Who is impacted by CVE-2025-66086?
Users of Cozy Vision SMS Alert Order Notifications who have not updated beyond version 3.8.8 are at risk from CVE-2025-66086.