EUVD-2026-102615

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the algwcevverifyemail parameter in versions up to, and including, 3.3.0. The vulnerability exists because algwcevgenerateusercode generates the per-user activation secret using wprand10...

CVE-2026-104745

The Customer Email Verification for WooCommerce plugin for WordPress (versions

WordPress Customer Email Verification for WooCommerce plugin <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter vulnerability

Unauthenticated Privilege Escalation to 'algwcevverifyemail' Parameter vulnerability discovered by Wordfence PRISM in WordPress Plugin Email Verification for WooCommerce versions = 3.3.0...

WordPress Customer Email Verification for WooCommerce plugin < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability

Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Email Verification for WooCommerce versions 3.2.6...

CVE-2026-14182 Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

CVE-2026-14182

The Customer Email Verification for WooCommerce WordPress plugin (versions before 3.2.6 ) is vulnerable to an unauthenticated account takeover due to a type-juggling authentication bypass. The root cause is a loose comparison used to validate the email-verification activation code, which can be s...

CVE-2026-14182: Improper Authentication

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

CVE-2024-13525: Exposure of Sensitive Information to an Unauthorized Actor

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data...

PT-2025-6466

Name of the Vulnerable Software and Affected Versions Customer Email Verification for WooCommerce plugin for WordPress versions up to and including 2.9.5 Description The issue is related to authentication bypass in the plugin. This is due to the presence of a shortcode that generates a confirmati...

CVE-2024-13528: Improper Authentication

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for...

CVE-2024-49305: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: from n/a through = 2.8.10...

CVE-2024-4185: Use of Insufficiently Random Values

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...

CVE-2023-39162: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in XLPlugins User Email Verification for WooCommerce plugin = 3.5.0 versions...

PT-2023-21359

Name of the Vulnerable Software and Affected Versions User Email Verification for WooCommerce plugin for WordPress versions up to, and including, 3.5.0 Description The issue is due to a random token generation weakness in the resend verification email function, allowing unauthenticated attackers ...

CVE-2023-2781: Authentication Bypass Using an Alternate Path or Channel

The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticateuserbyemail in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resendverificationemail function. This allows unauthenticated...