Cpe:2.3:a:naimur:email_otp_verification_for_woocommerce:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3anaimuremail_otp_verification_for_woocommerce/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 14:43:56 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNaimur Email OTP Verification for WooCommerce Authentication Bypass (CVE-2026-104014)https://feed.craftedsignal.io/briefs/2026-11-naimur-otp-bypass/Sat, 07 Nov 2026 14:43:56 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-naimur-otp-bypass/The Email OTP Verification for WooCommerce plugin contains an authentication bypass vulnerability allowing unauthenticated account takeover due to insecure password reset finalization and a lack of proper OTP cleanup.The Naimur Email OTP Verification for WooCommerce plugin for WordPress (versions 2.1.0 and earlier) contains an authentication bypass vulnerability in its password-reset finalization logic. The plugin's endpoint wp_ajax_nopriv_ceovw_update_new_password fails to validate session bindings, enforce timestamps, or require unique reset tokens. The vulnerability is compounded by a failure to clear verified database states, as the ceovw_cleanup_expired_otps_event cron job lacks an add_action handler. An unauthenticated attacker can exploit this by obtaining a publicly exposed nonce from the site and targeting an email address that previously verified an OTP, allowing them to overwrite the account password and obtain a valid session cookie.

Impact

Successful exploitation allows unauthenticated attackers to perform a full account takeover of any user who has initiated but not completed a password reset process. If the targeted account has administrative privileges, the attacker gains full control over the WordPress site.

Recommendation

  • Inventory all WordPress sites running Naimur Email OTP Verification for WooCommerce.
  • Disable or remove the plugin until a patch is released by the vendor.
  • Audit WordPress user account activity and session logs for unusual password reset patterns or unexpected administrative login activity originating from unknown IP addresses.
]]>criticaladvisorywordpressauthentication-bypassplugin-vulnerability