What the vulnerability does
01Description
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0. This is due to a random token generation weakness in the resend_verification_email function. This allows unauthenticated attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts, and automatically be logged in as that user, including any site administrators. This requires the Allow Automatic Login After Successful Verification setting to be enabled, which it is not by default.
Explanation of Vulnerability in Simple Terms
02Summary
User Email Verification for WooCommerce versions up to 3.5.0 contain an authentication bypass vulnerability. An attacker can bypass email verification checks without valid credentials, potentially gaining unauthorized access to user accounts or performing actions as verified users. The vulnerability requires specific conditions to exploit but can lead to account compromise and data exposure.
What an attacker can do
03Attacker Capabilities
Bypass email verification to gain unauthorized access to user accounts or impersonate verified users.
Potential impact on your site
04Site Impact
User accounts can be compromised without valid email verification, risking unauthorized access and fraudulent transactions.
Conditions required to exploit
05Prerequisites
Network access to the WooCommerce site; no authentication or user interaction required.
Key dates
06Disclosure timeline
June 2, 2023
CVE published
April 8, 2026
Record updated
