SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

277 searches this plugin appeared in over the last 90 days, 20 listed. 186 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 69% of the way through.

1. ★★★★★ techguysa

   2.7y ago

   This plug in works like a charm and the support is great. affordable sms’s sent out to client via the orders we get so instead of customers maybe getting an email (should their mail block yours) then they get a sms which is great especially on EFT orders with the detail sent and notificed when orders complete.

   Read on wp.org ↗
2. ★★★★★ Giordano

   3.2y ago

   I use this plugin for phone verification on WpForms. It is very easy to set up, it works perfectly and the user interface in completing the verification is the best I have seen in any wordpress plugin.

   Read on wp.org ↗
3. ★★★★★ arjunlajpal

   4.4y ago

   The plugin has more than the functionalities that one would expect. Login with OTP. Register with OTP. Order verification with OTP for configurable payment type orders. Tera wallet messages. and so on. Wonderful support provided on top of it 🙂

   Read on wp.org ↗
4. ★★★★★ rajiv98116

   4.6y ago

   Using for two days only, but found this plugin really great. It has every functionality, which I needed – custom status(all) sms, Terra wallet credit sms and many more. Integrated with my shipment tracker easily. They provide very fast support and solved all my problem within a day. Highly recommended

   Read on wp.org ↗
5. ★★★★★ samthambu

   4.7y ago

   I have been using SMSAlert PLugin for over a year now… It works perfectly fine and whenever I have any questions/issues, the support people immediately come to my rescue, get on the call, get on AnyDesk and resolve it… Thanks, Guys

   Read on wp.org ↗
6. ★★★★★ sidharthgarg100

   4.7y ago

   Thanks for making such an awesome plugin, I don’t even think of working online without your company plugin on my site, Your company always supported whenever I write mail to them Thanks for making such an awesome plugin God bless you🙏

   Read on wp.org ↗
7. ★★★★★ jacquesekendy

   4.7y ago

   Please try it. Their support is responsive and awesome

   Read on wp.org ↗
8. ★★★★★ brunogobo

   5.1y ago

   Você tem que pagar para enviar mensagens, isso não foi informado antes de baixar o plug-in You have to pay to send messages, this was not informed before downloading the plug-in. This topic was modified 4 years, 9 months ago by brunogobo. This topic was modified 4 years, 9 months ago by brunogobo.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.9.7 Enhancement: Security fixes for handling the admin settings update. Tested with the latest WordPress and WooCommerce versions. 3.9.7
2. — Version 3.9.6 Enhancement: Security fixes for handling the reset password process. Tested with the latest WordPress and WooCommerce versions. 3.9.6
3. — Version 3.9.5 Enhancement: Security fixes for handling the login process. Tested with the latest WordPress and WooCommerce versions. 3.9.5
4. — Version 3.9.4 Enhancement: Security fixes for GET variables. Tested with the latest WordPress and WooCommerce versions. 3.9.4
5. — Version 3.9.3 Enhancement: Compatibility fixes for Divi 5. Tested with the latest WordPress and WooCommerce versions. 3.9.3
6. — Version 3.9.2 Enhancement: Compatibility fixes for block checkout. 3.9.2

All 29 disclosed vulnerabilities are patched in the current version (4.0.3). Sites still on an older version should update.

1. Patched Medium · 4.3 SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.1 - Missing Authorization ↗
   2026-10-15 CVE-2026-110882 Missing Authorization Affects <= 4.0.1 Patched in 4.0.2
2. Patched Critical · 9.8 SMS Alert <= 4.0.0 - Unauthenticated Arbitrary Account Takeover ↗
   2026-10-08 CVE-2026-94256 Improper Authentication Affects <= 4.0.0 Patched in 4.0.1
3. Patched High · 7.3 SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation ↗
   2026-10-08 CVE-2026-94257 Improper Privilege Management Affects 3.9.6 - 4.0.0 Patched in 4.0.1
4. Patched Low · 2.7 SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery 3.6.4 - 4.0.0 - Authenticated (Administrator+) Information Exposure ↗
   2026-10-08 CVE-2026-94258 Exposure of Sensitive Information to an Unauthorized Actor Affects 3.6.4 - 4.0.0 Patched in 4.0.1
5. Patched High · 7.3 SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.0 - Unauthenticated Privilege Escalation ↗
   2026-10-05 CVE-2026-95594 Improper Privilege Management Affects <= 4.0.0 Patched in 4.0.1
6. Patched Medium · 6.3 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.9 - Authenticated (Subscriber+) Privilege Escalation ↗
   2026-09-11 CVE-2026-62106 Improper Privilege Management Affects <= 3.9.9 Patched in 4.0.0
7. Patched Critical · 9.8 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.8 - Authentication Bypass via Account Takeover ↗
   2026-08-24 CVE-2026-15206 Improper Authentication Affects < 3.9.8 Patched in 3.9.8
8. Patched High · 7.3 SMS Alert Order Notifications <= 3.9.7 - Unauthenticated Privilege Escalation ↗
   2026-08-06 CVE-2026-66424 Improper Privilege Management Affects <= 3.9.7 Patched in 3.9.8
9. Patched Medium · 4.9 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter ↗
   2026-07-27 CVE-2026-15670 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.9.7 Patched in 3.9.8
10. Patched Medium · 4.4 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings ↗
    2026-07-27 CVE-2026-15673 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.9.7 Patched in 3.9.8
11. Patched Critical · 9.8 SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter ↗
    2026-07-27 CVE-2026-15014 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.9.7 Patched in 3.9.8
12. Patched Medium · 4.9 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter ↗
    2026-07-27 CVE-2026-15671 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.9.7 Patched in 3.9.8
13. Patched Critical · 9.8 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.6 - Unauthenticated Privilege Escalation ↗
    2026-07-22 CVE-2026-59540 Incorrect Privilege Assignment Affects <= 3.9.6 Patched in 3.9.7
14. Patched Critical · 9.8 SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset ↗
    2026-06-30 CVE-2026-11387 Improper Authentication Affects <= 3.9.5 Patched in 3.9.6
15. Patched Medium · 5.3 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.3 - Missing Authorization ↗
    2026-06-16 CVE-2026-54802 Missing Authorization Affects <= 3.9.3 Patched in 3.9.4
16. Patched Medium · 6.3 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.4 - Authenticated (Subscriber+) Privilege Escalation ↗
    2026-06-16 CVE-2026-54803 Improper Privilege Management Affects <= 3.9.4 Patched in 3.9.5
17. Patched Medium · 4.3 SMS Alert Order Notifications <= 3.9.0 - Missing Authorization ↗
    2026-02-18 CVE-2026-32373 Missing Authorization Affects <= 3.9.0 Patched in 3.9.1
18. Patched Medium · 5.3 SMS Alert Order Notifications <= 3.8.8 - Missing Authorization ↗
    2025-12-05 CVE-2025-66086 Missing Authorization Affects <= 3.8.8 Patched in 3.8.9
19. Patched High · 7.5 SMS Alert Order Notifications <= 3.8.5 - Unauthenticated SQL Injection ↗
    2025-08-15 CVE-2025-49915 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.8.5 Patched in 3.8.6
20. Patched Medium · 6.4 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode ↗
    2025-05-09 CVE-2025-3878 Improper Neutralization of Input During Web Page Generation Affects <= 3.8.1 Patched in 3.8.2
21. Patched High · 8.8 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function ↗
    2025-05-09 CVE-2025-3876 Missing Authorization Affects <= 3.8.1 Patched in 3.8.2
22. Patched High · 7.5 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Unauthenticated SQL Injection ↗
    2025-05-08 CVE-2025-47682 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.8.1 Patched in 3.8.2
23. Patched Critical · 9.8 SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation ↗
    2025-03-31 CVE-2024-13553 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.7.9 Patched in 3.8.0
24. Patched High · 7.5 SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection ↗
    2025-03-02 CVE-2025-26988 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.7.8 Patched in 3.7.9
25. Patched Medium · 6.1 SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Reflected Cross-Site Scripting ↗
    2025-02-23 CVE-2025-26984 Improper Neutralization of Input During Web Page Generation Affects <= 3.7.8 Patched in 3.7.9
26. Patched High · 8.8 SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update ↗
    2025-01-06 CVE-2024-11725 Missing Authorization Affects <= 3.7.6 Patched in 3.7.7
27. Patched Medium · 6.4 SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode ↗
    2024-10-28 CVE-2024-10233 Improper Neutralization of Input During Web Page Generation Affects <= 3.7.5 Patched in 3.7.6
28. Patched Medium · 4.3 SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery ↗
    2024-02-26 CVE-2024-1489 Cross-Site Request Forgery Affects <= 3.6.9 Patched in 3.7.0
29. Patched Medium · 6.1 SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting ↗
    2021-08-02 CVE-2021-24588 Improper Neutralization of Input During Web Page Generation Affects < 3.4.7 Patched in 3.4.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 13 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 4K+ → 3K+ down after 352 days in tier
2. 2025-07-23 5K+ → 4K+ down after 663 days in tier
3. 2023-09-29 6K+ → 5K+ down after 741 days in tier
4. 2021-09-18 5K+ → 6K+ up after 152 days in tier
5. 2021-04-19 6K+ → 5K+ down after 51 days in tier
6. 2021-02-27 5K+ → 6K+ up after 34 days in tier
7. 2021-01-24 4K+ → 5K+ up after 144 days in tier
8. 2020-09-02 2K+ → 4K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery into a readme, a review or a deck. It updates itself.

SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery: 3K+ active installs, 4.6★ (35 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/sms-alert