Vulnerabilities
Summary — last 7 days
New vulnerabilities3,516▼ 1,241 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)691▲ 631 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.1) | 0.52% | PoC | Algoritmic Customer Email VerificationAI | 10/16/2026 | 10/16/2026 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` generates the per-user activation secret using `wp_rand(100)`… | |
| Deferred | Critical (9.8) | 0.50% | — | Wpfactory Customer Email Verification FOR WoocommerceAI | 8/13/2026 | 8/26/2026 | The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered… | |
| Analyzed | Medium (6.5) | 0.45% | — | Wpfactory Customer Email Verification FOR Woocommerce | 2/15/2025 | 6/17/2026 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including emails as well… | |
| Analyzed | High (7.5) | 0.48% | — | Wpfactory Customer Email Verification FOR Woocommerce | 2/12/2025 | 6/17/2026 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with… | |
| Deferred | High (8.1) | 0.85% | — | Wpfactory Customer Email Verification FOR WoocommerceAI | 4/30/2024 | 6/17/2026 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification, and… |