Persianscript CVEs and Security Vulnerabilities

Vulnerabilities (Persianscript)

CVE-2026-65532

WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability

Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Persianscript Wordpress

Products

Persian Woocommerce Sms Wordpress

CVE-2026-22352

WordPress Persian Woocommerce SMS plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocommerce SMS: from n/a through <= 7.1.1.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed