Extension WordPress
Vulnérabilités User Email Verification for WooCommerce
Cette page rassemble les failles publiées pour User Email Verification for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Email Verification for WooCommerce
4 fiches
User Email Verification for WooCommerce <= 3.5.0 – Reflected Cross-Site Scripting
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-3.5.0
Non indiqué
26/07/2023
User Email Verification for WooCommerce <= 3.5.0 – Authentication Bypass
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resend_verification_email function. This allows…
*-3.5.0
Non indiqué
02/06/2023
User Email Verification for WooCommerce <= 3.3.0 – Unauthenticated Arbitrary Options Update
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.3.0. This is due to missing authorization checks on the save_tab_settings() function. This makes it possible for unauthenticated…
*-3.3.0
3.4.0
22/05/2019
Woo Confirmation Email < 3.2.0 – Improper Access Control
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
*-3.1.15
3.2.0
27/11/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.