CVE-2026-95594: WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need an existing account or prior privileges to attempt exploitation. Network access is required, and the attack complexity is rated high.

Q: Which installations are affected?

SMS Alert Order Notifications versions 4.0.0 and earlier are affected according to the available information. The data does not state whether any particular WordPress or plugin configuration is required.

Q: What impact could successful exploitation have?

Successful exploitation can result in privilege escalation. The vulnerability is rated high severity with high potential impact to confidentiality, integrity, and availability.

Published Oct 6, 2026

Updated

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

Affected Software

1 affected component

SMS Alert SMS Alert Order Notifications<=4.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress SMS Alert Order Notifications plugin to a version that resolves this vulnerability.
Fixed in 4.0.1

Event History

Oct 6, 2026

CVE Published

via MITRE·08:35 AM

Data Sourced

via MITRE·08:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need an existing account or prior privileges to attempt exploitation. Network access is required, and the attack complexity is rated high.

Which installations are affected?

SMS Alert Order Notifications versions 4.0.0 and earlier are affected according to the available information. The data does not state whether any particular WordPress or plugin configuration is required.

What impact could successful exploitation have?

Successful exploitation can result in privilege escalation. The vulnerability is rated high severity with high potential impact to confidentiality, integrity, and availability.

CVE-2026-95594: WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What impact could successful exploitation have?