Threats tagged 'ghsa-pr3v-3whj-72rg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-14182Customer Email Verification for WooCommerce (WordPress plugin) · Improper Authentication Critical9.8EPSS 0.5%2026-08-13CVE Database V5CVE-2026-14182 The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account of any registered user who has not yet confirmed their email address. EPSS 0.5%Vulnerability CWE-287 #ghsa-pr3v-3whj-72rg	CVE Database V5	2026-08-13

Page 1 of 1