一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-14182 [CRITICAL] – The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not cor

未分类
📑 文章目录

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered user who has not yet confirmed their email address.