Skip to content
OpenAdvisories

Product · zorem

Customer Email Verification for WooCommerce

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8

    Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter

    The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and including, 2.8.2. This is due to the `authenticate_user_by_email_link()` function…