Critical · 9.3 CVE-2024-49305 EUVD-2024-43368GHSA-fhcj-8xxf-6hcq

WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPFactory Product: Email Verification for WooCommerce Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: from n/a through <= 2.8.10.

Affected products

Vendor	Product	Affected	Fixed
WPFactory	Email Verification for WooCommerce	≤ 2.8.10	—

References

https://patchstack.com/database/Wordpress/Plugin/emails-verification-for-woocommerce/vulnerability/wordpress-customer-email-verification-for-woocommerce-plugin-2-8-10-sql-injection-vulnerability?_s_id=cve vdb-entry