customer_email_verification_for_woocommerce vulnerabilities

2 known vulnerabilities in customer_email_verification_for_woocommerce from WPFactory. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Email Verification for WooCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-49305Oct 17, 2024WPFactory

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: f

• 8.1 High severity

  Customer Email Verification for WooCommerce: Use of Insufficiently Random Values

  CVE-2024-4185Apr 30, 2024Wpcodefactory

  The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unau