Customer Email Verification for WooCommerce vulnerabilities

3 known vulnerabilities in Customer Email Verification for WooCommerce from Wpcodefactory. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Customer Email Verification for WooCommerce: Improper Privilege Management

  CVE-2026-104745Oct 16, 2026Wpcodefactory

  The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` gen

• 7.5 High severity

  Customer Email Verification for WooCommerce: Improper Authentication

  CVE-2024-13528Feb 12, 2025Wpcodefactory

  The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email.

• 8.1 High severity

  Customer Email Verification for WooCommerce: Use of Insufficiently Random Values

  CVE-2024-4185Apr 30, 2024Wpcodefactory

  The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unau