Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
WpfactoryCustomer Email Verification For Woocommerce

2 matches found

CVE
CVE•added 2025/02/12 9:22 a.m.•62 views

CVE-2024-13528

CVE-2024-13528 : The Customer Email Verification for WooCommerce plugin (WordPress) is vulnerable to an authentication bypass. An attacker with Contributor+ privileges can generate a verification link for any unverified user via a shortcode that creates a confirmation link with a placeholder emai...

7.5CVSS7.3AI score0.00468EPSS
CVE
CVE•added 2025/02/15 8:25 a.m.•49 views

CVE-2024-13525

CVE-2024-13525 affects Customer Email Verification for WooCommerce (WordPress) up to version 2.9.4. An authenticated attacker with Contributor+ can exfiltrate emails and hashed passwords via Shortcode. Remediation: update to a version higher than 2.9.4 (patch available).

6.5CVSS6.8AI score0.00412EPSS