WordPress Customer Email Verification for WooCommerce plugin < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability

Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Email Verification for WooCommerce versions 3.2.6...

CVE-2026-14182 Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

CVE-2026-14182

The Customer Email Verification for WooCommerce WordPress plugin (versions prior to 3.2.6 ) is vulnerable to an unauthenticated account takeover via a type-juggling authentication bypass . The root cause is the plugin's failure to correctly validate the email-verification activation code, as it r...

CVE-2026-14182: Improper Authentication

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...