The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered user who has not yet confirmed their email address.
2026年9月4日
CVE-2026-14182 [CRITICAL] – The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not cor
📑 文章目录



