High · 7.1 CVE-2023-39162 EUVD-2023-42897GHSA-fwgc-q865-48hc

WordPress User Email Verification for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Published Sep 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions.

Vendor	Product	Affected	Fixed
XLPlugins	User Email Verification for WooCommerce	≤ 3.5.0	—