https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-43331.htmlhttps://patchthecve.com/cve/CVE-2024-43331.htmlWed, 17 Jun 2026 07:50:49 +0000MEDIUM 5.3: Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.9.3.https://patchthecve.com/cve/CVE-2024-34811.htmlhttps://patchthecve.com/cve/CVE-2024-34811.htmlWed, 17 Jun 2026 07:34:06 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a through 6.5.1.https://patchthecve.com/cve/CVE-2024-30454.htmlhttps://patchthecve.com/cve/CVE-2024-30454.htmlWed, 17 Jun 2026 07:26:59 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2.https://patchthecve.com/cve/CVE-2024-25920.htmlhttps://patchthecve.com/cve/CVE-2024-25920.htmlWed, 17 Jun 2026 07:16:43 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a through 6.3.4.https://patchthecve.com/cve/CVE-2024-24881.htmlhttps://patchthecve.com/cve/CVE-2024-24881.htmlWed, 17 Jun 2026 07:15:09 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc allows Reflected XSS.This issue affects WP SMS – Messaging & SMS Notification for WordPress, WooCommerchttps://patchthecve.com/cve/CVE-2023-6981.htmlhttps://patchthecve.com/cve/CVE-2023-6981.htmlWed, 17 Jun 2026 06:51:48 +0000MEDIUM 6.1: The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all versions up to, and including, 6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparhttps://patchthecve.com/cve/CVE-2023-6980.htmlhttps://patchthecve.com/cve/CVE-2023-6980.htmlWed, 17 Jun 2026 06:51:48 +0000MEDIUM 4.3: The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5. This is due to missing or incorrect nonce validation on the 'delete' action of the wp-sms-subscribers pahttps://patchthecve.com/cve/CVE-2023-27447.htmlhttps://patchthecve.com/cve/CVE-2023-27447.htmlWed, 17 Jun 2026 05:45:13 +0000MEDIUM 5.3: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This issue affects WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc: from n/a through 6.0.4.https://patchthecve.com/cve/CVE-2023-32742.htmlhttps://patchthecve.com/cve/CVE-2023-32742.htmlWed, 17 Jun 2026 05:59:29 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions.