WPClever WPC Smart Messages for WooCommerce

• CVE-2026-6725 Medium 6.4 WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute 0.2%
• CVE-2025-62903 Medium 6.5 WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-10437 Medium 4.3 WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation 0.4%
• CVE-2024-10436 High 8.8 WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion 0.7%