Veille CVE

Recherche « Unknown Customer Email Verification for WooCommerce »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Customer Email Verification for WooCommerce » ✕
  1. CVE-2026-14182 9.8 Critique

    Unknown Customer Email Verification for WooCommerce

    The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered user who has not yet confirmed their email address.