CVE-2026-96228: Authentication Bypass in SSL Wireless SMS Notification for WordPress
A critical vulnerability (CVE-2026-96228, CVSS 8.1) in the SSL Wireless SMS Notification WordPress plugin allows unauthenticated attackers to bypass authentication and take over user accounts by knowing the user's phone number. All versions up to and including 3.8.1 are affected. Immediate action is required to secure affected installations.