Authentication Bypass in User Email Verification Plugin for WooCommerce

CVE-2023-2781

What is CVE-2023-2781?

The User Email Verification for WooCommerce plugin is susceptible to an authentication bypass vulnerability due to weaknesses in random token generation within its email verification process. Attackers can exploit this vulnerability to impersonate legitimate users, triggering email verification for any account—including administrative accounts. Although the automatic login feature after verification is typically disabled by default, its activation allows unauthorized users to gain access to user accounts, posing a serious security threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References