SMS Alert Order Notifications – WooCommerce

Unauthenticated Account Takeover/Privilege Escalation vulnerability <= 3.7.9

SQL Injection vulnerability <= 3.7.8

Reflected Cross Site Scripting (XSS) vulnerability <= 3.7.8

Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability <= 3.7.6

WooCommerce plugin <= 3.7.5 Authenticated (Contributor+) Stored CrossSite Scripting via sa_subscribe Shortcode vulnerability <= 3.7.5