Mediaburst Email To Sms Vulnerabilities

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4.

Affected:

up to 3.0.4

Fix:

No patched version reported

Disclosed:

Dec 28, 2023

CVE-2023-50843 on NVD →

The Clockwork SMS Notfications plugin for WordPress is vulnerable to SQL Injection via an unknown parameter in all versions up to, and including, 3.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated atta...

CVSS:

6.6

Affected:

up to 3.0.4

Fix:

No patched version reported

Disclosed:

Dec 21, 2023

CVE-2023-50843 on NVD →

[en] The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.

Affected:

up to 2.4.2

Fixed in:

2.4.2

Disclosed:

Aug 13, 2019

CVE-2017-18495 on NVD →

[en] The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, B...

Affected:

up to 2.0.3

Fixed in:

2.0.3

Disclosed:

Dec 20, 2017

CVE-2017-17780 on NVD →

Reflected Cross-Site Scripting (XSS) vulnerability found by Elias Dimopoulos in WordPress Clockwork SMS Notfications plugin (versions <=2.0.3).

Affected:

up to 3.0.0

Fixed in:

3.0.0

Disclosed:

Dec 20, 2017

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Bookin...

CVSS:

6.1

Affected:

up to 2.0.3

Fix:

No patched version reported

Disclosed:

Dec 18, 2017

CVE-2017-17780 on NVD →

The gravity-forms-sms-notifications plugin before 2.4.2 for WordPress has XSS.

CVSS:

6.1

Affected:

up to 2.4.2

Fixed in:

2.4.2

Disclosed:

Nov 27, 2017

CVE-2017-18495 on NVD →

Reflected XSS via GET parameter &quot;to&quot;. Vulnerable Plugins: ------------------------------------------ 1. Clockwork Free and Paid SMS Notifications URL: https://wordpress.org/plugins/mediaburst-email-to-sms/ Version 2.0.3 | By Clockwork 2. Two-Factor Authentication - Clockwork SMS URL: https://word...

Affected:

up to 3.0.0

Fixed in:

3.0.0