SMS Alert Order Notifications – WooCommerce

SQL Injection vulnerability <= 3.7.8

Reflected Cross Site Scripting (XSS) vulnerability <= 3.7.8

Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability <= 3.7.6

WooCommerce plugin <= 3.7.5 Authenticated (Contributor+) Stored CrossSite Scripting via sa_subscribe Shortcode vulnerability <= 3.7.5

CrossSite Request Forgery vulnerability <= 3.6.9