https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:41:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-281678 EUVD-2026-281678 https://cve.radiocsirt.org/vuln/euvd-2026-281678 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13528 <p>The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The &#39;Fine tune placement&#39; option must be enabled in the plugin settings in order to exploit the vulnerability.</p> <p>The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The &#39;Fine tune placement&#39; option must be enabled in the plugin settings in order to exploit the vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13528 https://cve.radiocsirt.org/vuln/ghsa-ffhx-9g94-w22w <p>The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The &#39;Fine tune placement&#39; option must be enabled in the plugin settings in order to exploit the vulnerability.</p> <p>The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The &#39;Fine tune placement&#39; option must be enabled in the plugin settings in order to exploit the vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-ffhx-9g94-w22w