User Verification by PickPlugins vulnerabilities

2 known vulnerabilities in User Verification by PickPlugins from PickPlugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  User Verification by PickPlugins: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-7458May 2, 2026PickPlugins

  The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46. This is due to the use of a loose PHP comparison operator to validate OTP codes in the "user_verification_form_wrap_p

• 9.8 Critical severity

  User Verification by PickPlugins: Improper Authentication

  CVE-2025-12374Dec 5, 2025PickPlugins

  The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.44. This is due to the plugin not properl