{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3anaimuremail_otp_verification_for_woocommerce/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:naimur:email_otp_verification_for_woocommerce:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-104014"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Email OTP Verification for WooCommerce (\u003c= 2.1.0)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","authentication-bypass","plugin-vulnerability"],"_cs_type":"advisory","_cs_vendors":["Naimur"],"content_html":"\u003cp\u003eThe Naimur Email OTP Verification for WooCommerce plugin for WordPress (versions 2.1.0 and earlier) contains an authentication bypass vulnerability in its password-reset finalization logic. The plugin's endpoint \u003ccode\u003ewp_ajax_nopriv_ceovw_update_new_password\u003c/code\u003e fails to validate session bindings, enforce timestamps, or require unique reset tokens. The vulnerability is compounded by a failure to clear verified database states, as the \u003ccode\u003eceovw_cleanup_expired_otps_event\u003c/code\u003e cron job lacks an \u003ccode\u003eadd_action\u003c/code\u003e handler. An unauthenticated attacker can exploit this by obtaining a publicly exposed nonce from the site and targeting an email address that previously verified an OTP, allowing them to overwrite the account password and obtain a valid session cookie.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to perform a full account takeover of any user who has initiated but not completed a password reset process. If the targeted account has administrative privileges, the attacker gains full control over the WordPress site.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all WordPress sites running Naimur Email OTP Verification for WooCommerce.\u003c/li\u003e\n\u003cli\u003eDisable or remove the plugin until a patch is released by the vendor.\u003c/li\u003e\n\u003cli\u003eAudit WordPress user account activity and session logs for unusual password reset patterns or unexpected administrative login activity originating from unknown IP addresses.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T14:43:56Z","date_published":"2026-11-07T14:43:56Z","id":"https://feed.craftedsignal.io/briefs/2026-11-naimur-otp-bypass/","summary":"The Email OTP Verification for WooCommerce plugin contains an authentication bypass vulnerability allowing unauthenticated account takeover due to insecure password reset finalization and a lack of proper OTP cleanup.","title":"Naimur Email OTP Verification for WooCommerce Authentication Bypass (CVE-2026-104014)","url":"https://feed.craftedsignal.io/briefs/2026-11-naimur-otp-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:naimur:email_otp_verification_for_woocommerce:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}