A vulnerability identified as problematic has been detected in cozyvision1 SMS Alert Plugin up to 3.9.7 on WordPress. This issue affects some unknown processing. Performing a manipulation of the argument ID results in sql injection.

This vulnerability is known as CVE-2026-15671. Remote exploitation of the attack is possible. No exploit is available.