CVE-2024-11725 | cozyvision1 SMS Alert Order Notifications Plugin up to 3.7.6 on WordPress Setting updateWcWarrantySettings authorization

A vulnerability, which was classified as critical, has been found in cozyvision1 SMS Alert Order Notifications Plugin up to 3.7.6 on WordPress. Affected by this issue is the function updateWcWarrantySettings of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability is handled as CVE-2024-11725. The attack may be launched remotely. There is no exploit available.