CVE-2025-14948 | miniOrange OTP Verification and SMS Notification for WooCommerce Plugin Setting enable_wc_sms_notification authorization

A vulnerability, which was classified as problematic, was found in miniOrange OTP Verification and SMS Notification for WooCommerce Plugin up to 4.3.8 on WordPress. This affects the function enable_wc_sms_notification of the component Setting Handler. Such manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2025-14948. It is possible to launch the attack remotely. No exploit is available.