CVE-2024-5868 is a vulnerability in the WooCommerce - Social Login WordPress plugin where the email verification mechanism uses activation codes that are not sufficiently random. This weakness enables unauthenticated attackers to bypass the email verification step, potentially allowing them to impersonate or create accounts without proper validation. The issue affects all plugin versions up to and including 2.6.2. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with limited impact on confidentiality and integrity but no impact on availability.

An attacker can bypass the email verification process, which may lead to unauthorized account creation or impersonation within the WooCommerce environment. This could undermine trust in user identity validation but does not directly impact system availability. The confidentiality and integrity impacts are limited but present due to potential unauthorized access to user accounts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.