These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A high-severity privilege escalation vulnerability was found in the SMS Alert Order Notifications plugin versions up to 3.9.9. This issue allows subscribers to escalate their privileges. The CVE record was published on 2026-09-11T19:17:43.460Z and has not been modified since then.
A critical vulnerability was discovered in the SMS Alert Order Notifications plugin, allowing for subscriber privilege escalation. This issue, tracked as CVE-2026-54803, has a CVSS score of 9.8 and was published on June 17, 2026. The vulnerability affects versions up to 3.9.4 and allows attackers to escalate privileges due to inadequate access controls. Organizations using this plugin should take immediat [truncated]
CVE-2026-54802 is a HIGH-severity vulnerability (CVSS Score: 7.5) affecting the SMS Alert Order Notifications plugin up to version 3.9.3. This vulnerability allows unauthenticated attackers to bypass authentication due to broken authentication mechanisms. Successful exploitation could enable attackers to access sensitive information. The vulnerability was published on June 17, 2026, and immediately gained [truncated]