{"uuid": "61b75cbd-5868-44b6-9587-c49566d3da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117248599082338332", "content": "\u203c\ufe0f CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert \u2013 SMS &amp; OTP for WooCommerce, Order Notifications &amp; Abandoned Cart Recovery.\nGitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", "creation_timestamp": "2026-09-10T20:20:42.060788Z"}