WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WPC Smart Messages for WooCommerce

WPC Smart Messages help you display messages throughout your store through smart conditional logic settings.

4Reported vulnerabilities
8.8Highest CVSS score
4.3.3Latest version
1,000+Active installs

What to do now

Update WPC Smart Messages for WooCommerce to 4.2.9 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 26, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-10436 High 8.8 0.7% 0 to 4.2.1 (inclusive)
0 to 4.2.1 (inclusive)		 4.2.2 October 29, 2024
CVE-2026-6725 Medium 6.4 0.2% 0 to 4.2.8 (inclusive) 4.2.9 April 28, 2026
CVE-2025-62903 Medium 6.4 0.2% 4.2.8 and earlier 4.2.9 September 28, 2025
CVE-2024-10437 Medium 4.3 0.4% 0 to 4.2.1 (inclusive) 4.2.2 October 29, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.