CVE-2018-21007: Wisetr User Email Verification For Woocommerce

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

Affected products

• Wisetr User Email Verification For Woocommerce: before 3.2.0 (fixed in 3.2.0)

Published 2019-08-29. Last modified 2026-06-17.