Vendor
The Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to an authentication bypass via secret token leakage in the handle_email_otp_return function.