Beveiligingsadvies

CVE-2026-14182

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 06:00:12

Laatst bijgewerkt 2026-08-13 13:51:38

Toegewezen door WPScan

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered user who has not yet confirmed their email address.

← Alle CVE's bekijken Bekijk op cve.org ↗