Vendor
The Email OTP Verification for WooCommerce plugin contains an authentication bypass vulnerability allowing unauthenticated account takeover due to insecure password reset finalization and a lack of proper OTP cleanup.