Lucene search

CVE-2024-4185

🗓️ 30 Apr 2024 08:23:32Reported by WordfenceType

The WooCommerce plugin for WordPress allows Email Verification and Authentication Bypass in versions up to 2.7.4 due to insufficiently random activation codes

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2024-4185	30 Apr 202408:32	–	cvelist
Patchstack	WordPress Email Verification for WooCommerce Plugin <= 2.7.4 is vulnerable to Bypass Vulnerability	30 Apr 202400:00	–	patchstack
RedhatCVE	CVE-2024-4185	5 Feb 202500:06	–	redhatcve
CVE	CVE-2024-4185	30 Apr 202409:15	–	cve
WPVulnDB	Customer Email Verification for WooCommerce < 2.7.5 - Authentication Bypass	3 May 202400:00	–	wpvulndb
NVD	CVE-2024-4185	30 Apr 202409:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 29, 2024 to May 5, 2024)	9 May 202416:49	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:wpfactory:customer_email_verification_for_woocommerce:*:*:*:*:*:*:*:*"
    ],
    "vendor": "wpfactory",
    "product": "customer_email_verification_for_woocommerce",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.7.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.7.4/includes/alg-wc-ev-functions.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ebae4b18-5b5f-45c3-86e2-02eefd7abdb7
plugins	www.plugins.trac.wordpress.org/changeset/3078804/emails-verification-for-woocommerce
plugins	www.plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.7.4/includes/class-alg-wc-ev-core.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Apr 2024 08:32Current

7.5High risk

Vulners AI Score7.5

CVSS38.1

EPSS0.00443

SSVC