Skip to content
PluginCanary

SMS Alert

SMS Alert - SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery
by Cozy Vision Technologies Pvt. Ltd. · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 28 Oct 2026, 51 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for SMS Alert
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is SMS Alert still maintained?
Yes. Last release 28 Oct 2026, 51 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns SMS Alert, and has it changed hands?
No change recorded. Main committer cozyvision1 since Dec 2016. 3 Nov 2026 · SVN log
Was SMS Alert removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is SMS Alert safe?
30 known vulnerabilities, all fixed (latest in 4.0.3). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest SMS Alert update safe to install?
No ownership change before 4.0.3. No one-star spike after it. 28 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cozyvision121 Dec 2016 to 28 Oct 2026, 808 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
7 days ago
Releases, 24 months
51
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for SMS Alert
Q1 20241
Q2 20240
Q3 20240
Q4 20240
Q1 202510
Q2 20250
Q3 20250
Q4 20250
Q1 202622
Q2 20263
Q3 202613
Q4 20263

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Rating distribution
5 star30
4 star1
3 star1
2 star0
1 star3

Security record

27 vulnerabilities in 24 months (30 on record), all patched (latest fixed in 4.0.3).

Show 30 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026SMS Alert - SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.2 - Unauthenticated Privilege Escalation7.3<= 4.0.24.0.3Patched before disclosure
15 Oct 2026SMS Alert - SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.1 - Missing Authorization4.3<= 4.0.14.0.2Patched before disclosure
8 Oct 2026SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation7.33.9.6 to 4.0.04.0.1Patched before disclosure
8 Oct 2026SMS Alert <= 4.0.0 - Unauthenticated Arbitrary Account Takeover9.8<= 4.0.04.0.1Patched before disclosure
8 Oct 2026SMS Alert - SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery 3.6.4 - 4.0.0 - Authenticated (Administrator+) Information Exposure2.73.6.4 to 4.0.04.0.1Patched before disclosure
5 Oct 2026SMS Alert - SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.0 - Unauthenticated Privilege Escalation7.3<= 4.0.04.0.1Patched before disclosure
11 Sep 2026SMS Alert - SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.9 - Authenticated (Subscriber+) Privilege Escalation6.3<= 3.9.94.0.0Patched before disclosure
24 Aug 2026SMS Alert - SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.8 - Authentication Bypass via Account Takeover9.8< 3.9.83.9.8Patched before disclosure
6 Aug 2026SMS Alert Order Notifications <= 3.9.7 - Unauthenticated Privilege Escalation7.3<= 3.9.73.9.8Patched before disclosure
27 Jul 2026SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9<= 3.9.73.9.8Patched before disclosure
27 Jul 2026SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings4.4<= 3.9.73.9.8Patched before disclosure
27 Jul 2026SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter9.8<= 3.9.73.9.8Patched before disclosure
27 Jul 2026SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter4.9<= 3.9.73.9.8Patched before disclosure
22 Jul 2026SMS Alert - SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.6 - Unauthenticated Privilege Escalation9.8<= 3.9.63.9.7Patched before disclosure
30 Jun 2026SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset9.8<= 3.9.53.9.6Patched before disclosure
16 Jun 2026SMS Alert - SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.3 - Missing Authorization5.3<= 3.9.33.9.4Patched before disclosure
16 Jun 2026SMS Alert - SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.4 - Authenticated (Subscriber+) Privilege Escalation6.3<= 3.9.43.9.5Patched before disclosure
18 Feb 2026SMS Alert Order Notifications <= 3.9.0 - Missing Authorization4.3<= 3.9.03.9.1Patched before disclosure
5 Dec 2025SMS Alert Order Notifications <= 3.8.8 - Missing Authorization5.3<= 3.8.83.8.9278
15 Aug 2025SMS Alert Order Notifications <= 3.8.5 - Unauthenticated SQL Injection7.5<= 3.8.53.8.6390
9 May 2025SMS Alert Order Notifications - WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode6.4<= 3.8.13.8.2487
9 May 2025SMS Alert Order Notifications - WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function8.8<= 3.8.13.8.2487
8 May 2025SMS Alert Order Notifications - WooCommerce <= 3.8.1 - Unauthenticated SQL Injection7.5<= 3.8.13.8.2489
31 Mar 2025SMS Alert Order Notifications - WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation9.8<= 3.7.93.8.0Patched before disclosure
2 Mar 2025SMS Alert Order Notifications - WooCommerce <= 3.7.8 - Unauthenticated SQL Injection7.5<= 3.7.83.7.9383

Changelog mentions of security fixes: 3.9.6 (security); 3.9.7 (security); 3.9.8 (security); 4.0.0 (security); 4.0.1 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SMS Alert
4 May 2026203
11 May 2026374
18 May 2026436
25 May 2026238
1 Jun 2026253
8 Jun 2026252
15 Jun 2026677
22 Jun 20261,228
29 Jun 20261,364
6 Jul 2026549
13 Jul 20261,782
20 Jul 2026796
27 Jul 20262,283
3 Aug 2026584
10 Aug 2026313
17 Aug 20261,525
24 Aug 2026580
31 Aug 2026387
7 Sep 20262,003
14 Sep 2026714
21 Sep 2026463
28 Sep 20261,395
5 Oct 20262,357
12 Oct 20261,054
19 Oct 2026651
26 Oct 20262,274
2 Nov 2026125

Weekly downloads over the last 4 weeks are 11% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version4.0.3
AuthorCozy Vision Technologies Pvt. Ltd.
Added18 Dec 2016
Last updated28 Oct 2026
Active installs3,000+
Requires WordPress4.6
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsabandoned cart, login with otp, woocommerce SMS, cod verification, OTP Verification

Other plugins by this author: Claim GST for Input Tax Credit, Chat On Desk Order Notifications - WooCommerce

Questions

Is SMS Alert still maintained?

Yes. Last release 28 Oct 2026, 51 releases in the last 24 months.

Who owns SMS Alert, and has it changed hands?

No change recorded. Main committer cozyvision1 since Dec 2016.

Was SMS Alert removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is SMS Alert safe?

30 known vulnerabilities, all fixed (latest in 4.0.3). Not on the exploited list.

Is the latest SMS Alert update safe to install?

No ownership change before 4.0.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue