plugin
9 known security issues reported for the Woo Confirmation Email WordPress plugin. Most recent disclosed Sep 4, 2023.
Running Woo Confirmation Email on your site? Check whether your installed version is affected.
Scan your site free[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions.
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resend_verification_email function. This allows unauthenticated attackers to impersonat...
[en] The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resend_verification_email function. This allows unauthenticated attackers to imper...
[en] The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.3.0. This is due to missing authorization checks on the save_tab_settings() function. This makes it possible for unauthenticated attackers to change otherwise restricted plugin opti...
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.3.0. This is due to missing authorization checks on the save_tab_settings() function. This makes it possible for unauthenticated attackers to change otherwise restricted plugin opti...
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
The User Email Verification for WooCommerce WordPress plugin was affected by a CSRF leading to Option Update security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free