Wpcodefactory vulnerabilities
We track 3 vulnerabilities in Wpcodefactory products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Wpcodefactory vulnerabilities
- 8.1 High severity
Customer Email Verification for WooCommerce: Improper Privilege Management
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` gen
- 7.5 High severity
Customer Email Verification for WooCommerce: Improper Authentication
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email.
- 8.1 High severity
Customer Email Verification for WooCommerce: Use of Insufficiently Random Values
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unau