CVE-2023-39162: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in XLPlugins User Email Verification for WooCommerce plugin = 3.5.0 versions...

PT-2023-21359

Name of the Vulnerable Software and Affected Versions User Email Verification for WooCommerce plugin for WordPress versions up to, and including, 3.5.0 Description The issue is due to a random token generation weakness in the resend verification email function, allowing unauthenticated attackers ...

CVE-2023-2781: Authentication Bypass Using an Alternate Path or Channel

The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticateuserbyemail in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resendverificationemail function. This allows unauthenticated...