WordPress Plugin Vulnerabilities

User Email Verification for WooCommerce < 3.4.0 - CSRF leading to Option Update

Description

The User Email Verification for WooCommerce WordPress plugin was affected by a CSRF leading to Option Update security vulnerability.

Affects Plugins

Plugin icon
woo-confirmation-email
Fixed in 3.4.0

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2093157%40woo-confirmation-email&old=2082510%40woo-confirmation-email

Miscellaneous

Verified
No
WPVDB ID
2add62da-2a4b-4105-89cc-4c4033b9b56a

Timeline

Publicly Published
2019-05-22 (about 6 years ago)
Added
2019-06-24 (about 6 years ago)
Last Updated
2019-06-24 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
WP Ultimate Email Marketer - Multiple Vulnerabilities
Published
2016-06-20
Title
Jetpack <= 4.0.3 - Multiple Vulnerabilities
Published
2020-07-06
Title
Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call
Published
2020-04-01
Title
Login by Auth0 < 4.0.0 - Multiple Vulnerabilities
Published
2017-05-11
Title
Tracking Code Manager < 1.11.4 - Authenticated XSS, CSRF & DoS