PULSEUnderground Intel

LIVE21signals / 24h

FEED

ransomqilin reclama a CORBY ROCK MILL · IE · Manufacturingransomqilin reclama a Delta Marine · FI · Transportationransomqilin reclama a J&D Financial · Financial Servicesransomendzone reclama a Philander Smith University · US · Educationransomsilentransomgroup reclama a A...n · Not Foundransomnetrunner reclama a M** A******* G********** O******* a** P***** S****** A********* · US · Not Foundransomqilin reclama a Global Security Concepts · US · Professional Servicesransombyod reclama a Standpointe / Trinite Solutions · Professional Servicesransomsafepay reclama a dd-automation.ch · CZ · Technologyransomsafepay reclama a stuecheli.ch · CH · Retail & E-Commerceransomsafepay reclama a bwi-bau.de · DE · Professional Servicesransomsafepay reclama a halservice.it · IT · Professional Servicesransomsafepay reclama a grundens.com · US · Retail & E-Commerceransomsafepay reclama a t-systems.com · DE · Technologyransomqilin reclama a CORBY ROCK MILL · IE · Manufacturingransomqilin reclama a Delta Marine · FI · Transportationransomqilin reclama a J&D Financial · Financial Servicesransomendzone reclama a Philander Smith University · US · Educationransomsilentransomgroup reclama a A...n · Not Foundransomnetrunner reclama a M** A******* G********** O******* a** P***** S****** A********* · US · Not Foundransomqilin reclama a Global Security Concepts · US · Professional Servicesransombyod reclama a Standpointe / Trinite Solutions · Professional Servicesransomsafepay reclama a dd-automation.ch · CZ · Technologyransomsafepay reclama a stuecheli.ch · CH · Retail & E-Commerceransomsafepay reclama a bwi-bau.de · DE · Professional Servicesransomsafepay reclama a halservice.it · IT · Professional Servicesransomsafepay reclama a grundens.com · US · Retail & E-Commerceransomsafepay reclama a t-systems.com · DE · Technology

CVE WatchOct 6, 2026

CVE-2026-95594

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

CVSS

8.1

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 6, 2026 · Last modified: Oct 6, 2026 · CWE-266

EPSS · 30d

Not enough EPSS history yet.

Technical description

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-4-0-0-privilege-escalation-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-481977.2 HIG

———Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.7h CVE-2026-397758.8 HIG

———Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.7h CVE-2026-397748.8 HIG

———Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.7h CVE-2026-3977310.0 CRI

———Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.7h CVE-2026-397657.2 HIG

———Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.7h CVE-2026-397619.8 CRI

———Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.7h