PT-2023-21359 · WordPress · Customer Email Verification For Woocommerce
István Márton
+1
·
Published
2023-06-02
·
Updated
2023-06-09
·
CVE-2023-2781
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
User Email Verification for WooCommerce plugin for WordPress versions up to, and including, 3.5.0
Description
The issue is due to a random token generation weakness in the
resend verification email function, allowing unauthenticated attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts. This can automatically log the attacker in as the targeted user, including site administrators, if the Allow Automatic Login After Successful Verification setting is enabled. The authenticate user by email function is vulnerable to authentication bypass.Recommendations
For versions up to, and including, 3.5.0, consider disabling the
resend verification email function and the Allow Automatic Login After Successful Verification setting until a patch is available. Restrict access to the authenticate user by email function to minimize the risk of exploitation. Update to a version later than 3.5.0 when available.Fix
Authentication Bypass Using an Alternate Path or Channel
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Customer Email Verification For Woocommerce