SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 68% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ techguysa

   2.6y ago

   This plug in works like a charm and the support is great. affordable sms’s sent out to client via the orders we get so instead of customers maybe getting an email (should their mail block yours) then they get a sms which is great especially on EFT orders with the detail sent and notificed when orders complete.

   Read on wp.org ↗
2. ★★★★★ Giordano

   3.1y ago

   I use this plugin for phone verification on WpForms. It is very easy to set up, it works perfectly and the user interface in completing the verification is the best I have seen in any wordpress plugin.

   Read on wp.org ↗
3. ★★★★★ arjunlajpal

   4.3y ago

   The plugin has more than the functionalities that one would expect. Login with OTP. Register with OTP. Order verification with OTP for configurable payment type orders. Tera wallet messages. and so on. Wonderful support provided on top of it 🙂

   Read on wp.org ↗
4. ★★★★★ rajiv98116

   4.5y ago

   Using for two days only, but found this plugin really great. It has every functionality, which I needed – custom status(all) sms, Terra wallet credit sms and many more. Integrated with my shipment tracker easily. They provide very fast support and solved all my problem within a day. Highly recommended

   Read on wp.org ↗
5. ★★★★★ samthambu

   4.5y ago

   I have been using SMSAlert PLugin for over a year now… It works perfectly fine and whenever I have any questions/issues, the support people immediately come to my rescue, get on the call, get on AnyDesk and resolve it… Thanks, Guys

   Read on wp.org ↗
6. ★★★★★ sidharthgarg100

   4.5y ago

   Thanks for making such an awesome plugin, I don’t even think of working online without your company plugin on my site, Your company always supported whenever I write mail to them Thanks for making such an awesome plugin God bless you🙏

   Read on wp.org ↗
7. ★★★★★ jacquesekendy

   4.5y ago

   Please try it. Their support is responsive and awesome

   Read on wp.org ↗
8. ★★★★★ brunogobo

   4.9y ago

   Você tem que pagar para enviar mensagens, isso não foi informado antes de baixar o plug-in You have to pay to send messages, this was not informed before downloading the plug-in. This topic was modified 4 years, 9 months ago by brunogobo. This topic was modified 4 years, 9 months ago by brunogobo.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.9.7 Enhancement: Security fixes for handling the admin settings update. compatibility check for latest woocommerce version compatibility check for latest wordpress version 3.9.7
2. — Version 3.9.6 Enhancement: Security fixes for handling the reset password process. compatibility check for latest woocommerce version compatibility check for latest wordpress version 3.9.6
3. — Version 3.9.5 Enhancement: Security fixes for handling the login process. compatibility check for latest woocommerce version compatibility check for latest wordpress version 3.9.5
4. — Version 3.9.4 Enhancement: Security fixes for get variables. compatibility check for latest woocommerce version compatibility check for latest wordpress version 3.9.4
5. — Version 3.9.3 Enhancement: Compatbility fixes for divi 5 compatibility check for latest woocommerce version compatibility check for latest wordpress version 3.9.3
6. — Version 3.9.2 Enhancement: Compatbility fixes for block checkout 3.9.2

23 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Critical · 9.8 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.8 - Authentication Bypass via Account Takeover ↗
   2026-08-24 CVE-2026-15206 Improper Authentication Affects < 3.9.8 Patched in 3.9.8
2. High · 7.3 SMS Alert Order Notifications <= 3.9.7 - Unauthenticated Privilege Escalation ↗
   2026-08-06 CVE-2026-66424 Improper Privilege Management Affects <= 3.9.7 Patched in 3.9.8
3. Medium · 4.9 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter ↗
   2026-07-27 CVE-2026-15670 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.9.7 Patched in 3.9.8
4. Medium · 4.4 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings ↗
   2026-07-27 CVE-2026-15673 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.9.7 Patched in 3.9.8
5. Critical · 9.8 SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter ↗
   2026-07-27 CVE-2026-15014 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.9.7 Patched in 3.9.8
6. Medium · 4.9 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter ↗
   2026-07-27 CVE-2026-15671 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.9.7 Patched in 3.9.8
7. Critical · 9.8 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.6 - Unauthenticated Privilege Escalation ↗
   2026-07-22 CVE-2026-59540 Incorrect Privilege Assignment Affects <= 3.9.6 Patched in 3.9.7
8. Critical · 9.8 SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset ↗
   2026-06-30 CVE-2026-11387 Improper Authentication Affects <= 3.9.5 Patched in 3.9.6
9. Medium · 5.3 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.3 - Missing Authorization ↗
   2026-06-16 CVE-2026-54802 Missing Authorization Affects <= 3.9.3 Patched in 3.9.4
10. Medium · 6.3 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.4 - Authenticated (Subscriber+) Privilege Escalation ↗
    2026-06-16 CVE-2026-54803 Improper Privilege Management Affects <= 3.9.4 Patched in 3.9.5
11. Medium · 4.3 SMS Alert Order Notifications <= 3.9.0 - Missing Authorization ↗
    2026-02-18 CVE-2026-32373 Missing Authorization Affects <= 3.9.0 Patched in 3.9.1
12. Medium · 5.3 SMS Alert Order Notifications <= 3.8.8 - Missing Authorization ↗
    2025-12-05 CVE-2025-66086 Missing Authorization Affects <= 3.8.8 Patched in 3.8.9
13. High · 7.5 SMS Alert Order Notifications <= 3.8.5 - Unauthenticated SQL Injection ↗
    2025-08-15 CVE-2025-49915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.8.5 Patched in 3.8.6
14. Medium · 6.4 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode ↗
    2025-05-09 CVE-2025-3878 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8.1 Patched in 3.8.2
15. High · 8.8 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function ↗
    2025-05-09 CVE-2025-3876 Missing Authorization Affects <= 3.8.1 Patched in 3.8.2
16. High · 7.5 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Unauthenticated SQL Injection ↗
    2025-05-08 CVE-2025-47682 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.8.1 Patched in 3.8.2
17. Critical · 9.8 SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation ↗
    2025-03-31 CVE-2024-13553 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.7.9 Patched in 3.8.0
18. High · 7.5 SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection ↗
    2025-03-02 CVE-2025-26988 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.8 Patched in 3.7.9
19. Medium · 6.1 SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Reflected Cross-Site Scripting ↗
    2025-02-23 CVE-2025-26984 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.8 Patched in 3.7.9
20. High · 8.8 SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update ↗
    2025-01-06 CVE-2024-11725 Missing Authorization Affects <= 3.7.6 Patched in 3.7.7
21. Medium · 6.4 SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode ↗
    2024-10-28 CVE-2024-10233 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.5 Patched in 3.7.6
22. Medium · 4.3 SMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery ↗
    2024-02-26 CVE-2024-1489 Cross-Site Request Forgery (CSRF) Affects <= 3.6.9 Patched in 3.7.0
23. Medium · 6.1 SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting ↗
    2021-08-02 CVE-2021-24588 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.4.7 Patched in 3.4.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 13 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 4K+ → 3K+ down after 352 days in tier
2. 2025-07-23 5K+ → 4K+ down after 663 days in tier
3. 2023-09-29 6K+ → 5K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• OTP Login & Register Woocommerce 1K+ installs · 4.4★ · 1 shared tag A
• OTP Login With Phone Number, OTP Verification 900+ installs · 4.7★ · 1 shared tag A
• Orion SMS OTP Verification. 200+ installs · 4.7★ · 1 shared tag A
• Alpha SMS 200+ installs · 4.1★ · 1 shared tag B
• miniOrange OTP Verification and SMS Notification for WooCommerce 100+ installs · 4.3★ · 1 shared tag B
• Authyo OTP for Contact Form 7 30+ installs · 4.0★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery into a readme, a review or a deck. It updates itself.

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery: 3K+ active installs, 4.6★ (35 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/sms-alert