Skip to content
Threat Feed
Subscribe

Product

Customer Email Verification for WooCommerce (<= 3.3.0)

1 brief RSS
high advisory

CVE-2026-104745 - Privilege Escalation in Customer Email Verification for WooCommerce

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to unauthenticated privilege escalation due to insufficient entropy in activation token generation when configured to use the 'hashids' encoding method.

Customer Email Verification for WooCommerce web-application wordpress privilege-escalation cve-2026-104745
1r 1t 1c