Naimur Email OTP Verification for WooCommerce vulnerabilities
1 known vulnerability in Naimur Email OTP Verification for WooCommerce from Naimurrahmannahid. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Naimur Email OTP Verification for WooCommerce: Improper Authentication
The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.0. This is due to the plugin's password-reset finalization endpoint (the wp_ajax_nopriv_ceovw_update_new_passwor