3 matches found
PT-2023-21359
Name of the Vulnerable Software and Affected Versions User Email Verification for WooCommerce plugin for WordPress versions up to, and including, 3.5.0 Description The issue is due to a random token generation weakness in the resend verification email function, allowing unauthenticated attackers ...
CVE-2021-34646: Authentication Bypass by Spoofing
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink function found in the...
PT-2021-20614 · WordPress · Booster For Woocommerce
Name of the Vulnerable Software and Affected Versions: Booster for WooCommerce WordPress plugin versions up to, and including, 5.4.3 Description: The issue allows attackers to bypass authentication via the process email verification function due to a weakness in random token generation in the res...