Customer Email Verification for WooCommerce
Customer Email Verification for WooCommerce has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Improper Authentication, behind 2 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Incorrect Comparison.
Every one of the 6 issues recorded for Customer Email Verification for WooCommerce has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, most of them (2) reported by wesley (wcraft). Customer Email Verification for WooCommerce is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-14182Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Privilege Escalation
Read the full analysisVulnerability Records

Customer Email Verification for WooCommerce
Author
WPFactory
woocommerce“Amazing support and plugin: Support helped me integrate their plugin with another plugin and I am really grateful for it. The best verification plugin out there at the moment with awesome support” – ⭐⭐⭐⭐⭐ mountainbirb Main Page | Support Forum | Documentation & How to | Demo In the dynamic world of e-commerce, ensuring the authenticity and engagement of your customer base is crucial. That’s where the “Email Verification for WooCommerce” plugin comes in, addressing a vital aspect of customer management. By integrating email verification into your WooCommerce setup, this plugin enhances the security and reliability of user registrations. It’s designed not just to verify new users but also to streamline customer management for existing accounts. Let’s take a quick look into how this plugin can transform your WooCommerce experience: 1. New User Registration Verification: New user accounts require email verification, bolstering the security and authenticity of each registration. 2. Verification for Existing Users: Have an existing user base? The plugin offers the flexibility to implement email verification for already registered users, enhancing the integrity of your existing customer base. 3. Role-Based Verification Flexibility: Skip the email verification process for selected user roles, allowing you to customize the verification process based on user hierarchy. 4. Customizable Emails & Messages: Tailor the verification messages displayed to users on your site and emails, ensuring a seamless and brand-consistent experience on the frontend of your store. 5. Admin Control and Management: Admins gain significant control, including options to manually verify or unverify users, resend activation links, and even delete unverified users either manually or on an automated schedule. By integrating these features, the “Email Verification for WooCommerce” plugin not only secures your user registration process but also offers significant flexibility and control in managing your customer base. 🤝 Recommended By ThriveDesk: Best WooCommerce Email Verification Plugins in 2024 YayCommerce: How to Validate Email Address in WooCommerce WPGlob: Best WordPress Email Verification Plugins for Your Business LearnWoo: Why and How to Protect WooCommerce Order Page Edward Le – LinkedIn: Top 3 Best WooCommerce Email Verification Plugins WhiteWP: The Best WordPress Email Verification Plugins to Confirm Contact Information 🚀 Main Features: FREE Version 🚀 Verify Customers Emails on Signup Require new users to verify their emails on signup Block login from unverified users Login the user automatically after the account is verified Verify guest user billing address on checkout 🚀 Enforce Email Verification for Current Customers Enforce all your current users to verify their email addresses before logging back in to your store Resend verification emails by admin when needed 🚀 Skip Validation based on user role () Select to skip validation for any user role based on your store needs (wholesalers, admins, authors, etc.) 🚀 Add Verification status to “My Account” Page Show account verification info on “My Account” page Add account verification info widget Customize verification message text (Pro) 🚀 Control Redirection On Verification Status Redirects customers after successful verification Select where to redirect: Homepage, “My Account”, Shop, previous URL or Custom URL Redirects customers after unsuccessful verification Select a custom URL after unverified customer tries to login 🚀 Control Activation/Verification Link Expiration Expire link immediately after first click Define a custom period (in seconds, days) when the link will be expired (Pro) Customize text message to show when has expired (Pro) 🚀 Activation Email Customization The plugin allows you to effortlessly customize emails that will be sent to your customers to activate their accounts, you can: Delay WooCommerce “Customer new account” email until account is verified Select to customize the email from plugin template, or create new email type in WooCommerce >> Emails Select from 15+ placeholder (like site_title, user_id, user_email) to be used in email subject & body Choose to send separate activation email or embed it in the standard WooCommerce “Customer new account” email Configure your preferred mail function (PHP, WordPress, WooCommerce) 🚀 Verification Confirmation Email Customization Once your customers are verified, you can customize the confirmation email that will be sent to them, you can: Send a verification email immediately once customer activates their account Delay sending the emails so customers don’t get too many emails in short time Send notification email to admin (or any email) when a user is manually verified by admin Customize admin email title & body 🚀 Block Unverified Users You can block content for unverified users (including guests) by preventing access to any page of your site Block non-paying users: Block activation link until the customer places an order and its status is considered paid Check & Logout unverified users on “My Account” page or any other page 🚀 Handy Admin Tools Allow any user role (non admins) to manage & interact with the admin interface of the plugin Add a “Verified” column in “All users” page Filter users on “All users” page based on verification status Add links for manual email verification, un-verification and email resend by admin Bulk action options to Resend email, Verify, or Un-verify users in “All users” page 🚀 Customize Verification Messages Once your user clicks on activation link, you can customize messages that appear based on activation status, you can customize: Success messages appearing after customer verifies their account Messages appearing after signup if you block login for unverified users Failed activation messages (expiry, broken link, etc) and include a %resend_verification_url% Resend link, error & already-verified messages 🚀 Delete Unverified Users (Manual & Automatic) Delete unverified users from the database for one time Delete unverified users from the database automatically (Hourly, Daily, Twice a day, Weekly) 🚀 More Advanced Options More options to control authentication filters, auth cookies, custom logout function Encoding options (Base64 or HashIDs) Prevent user automatic login after registration on “My Account” page Prevent user automatic login after registration on “Checkout” page “Excellent Support + Plugin: As the title states, brilliant plugin with great free functionality – support was excellent and very helpful in solving a customisation issue.” – ⭐⭐⭐⭐⭐ Masidus “Good flexibility and support: Plugin does what it says, and provides lots of configuration options. Had a minor issue that required support, and the problem was resolved very quickly, with great communication. Highly recommended.” – ⭐⭐⭐⭐⭐ reefables 🏆 Do More: PRO Version All what’s listed above (and more) is available in the free version, but for those who would like to go further and beyond, we have a premium version of Customer Email Verification for WooCommerce plugin. 🏆 The Pro version unlocks more advanced features like: 🏆 Block Content for Unverified & Guest Users Block unverified users from accessing specific products Block unverified users from accessing all shop pages, categories, tags, or cart Block by custom URLs Customize messages appearing when unverified customers try to access blocked content Blocks checkout process for unverified users Blocks guests from adding any products to the cart Block WooCommerce order emails for all non-verified users Block account verification by email (and customize the message for them) Block “Thank you” (i.e. “Order received”) page access for non-verified users 🏆 Customization Options Verify the user on password reset Verify customers as soon as any of their non-free orders are considered paid Unverify, logout and resend activation link when a customer changes their email Customize email template to be used (Plain, WooCommerce, or Smart) Customize titles, heading & content for activation & verification emails REST API: Add endpoint allowing to verify users via REST API Premium support 🏆 Compatibility Options Our plugin offers several compatibility options with third party plugins, like: WooCommerce Social Login by SkyVerge WooCommerce Social Login by wpweb Super Socializer by Team Heateor MyListing theme by 27collective Nextend Social Login by Nextendweb WooMail by CidCode (to append verification email with their email) Polylang (multi-language) compatibility Essential Addons for Elementor by WPDeveloper Email Customizer for WooCommerce by Themehigh Email Customizer for WooCommerce by VillaTheme Paid Memberships Pro YayMail – WooCommerce Email Customizer by YayCommerce WoodMart theme by xtemos And much more to come soon. 💯 Why WPFactory? Experience You Can Trust: Over a decade in the business Wide Plugin Selection: Offering 65+ unique and powerful plugins Highly-Rated Support: Backed by hundreds of 5-star reviews Expert Team: Dedicated developers and technical support at your service What’s Next? Discover More Plugins by WPFactory WPFactory has a diverse range of plugins tailored to enhance your experience, some of our top-selling plugins are: Min Max Step Quantity: Set minimum, maximum, step, and default product quantities, including dropdowns and decimal options on WooCommerce (Free version) Cost of Goods for WooCommerce: Enhance profit maximization and financial management by accurately calculating your WooCommerce store’s COGS (Free version) Maximum Products per User: Impose personalized purchase limits based on user roles and date ranges to manage customer buying behavior (Free version) Order Minimum/Maximum Amount: Customize order limits by amount, quantity, weight, or volume, including user role, category, and more (Free version) EU/UK VAT Manager for WooCommerce: Automate VAT compliance for your WooCommerce store, including settings and VIES validation for a seamless experience (Free version) Email Verification for WooCommerce: Boost security and credibility by verifying customer emails, reducing spam, and improving email marketing (Free version) Free Shipping Over Amount for WooCommerce: Encourage higher spending by offering free shipping based on amount, with a progress bar for customers (Free version) Dynamic Pricing & Bulk Quantity Discounts: Advanced dynamic pricing and discount rules for WooCommerce, encouraging bulk purchases and driving more sales (Free version) ❤️ User Testimonials: See What Others Are Saying! “The best verification plugin at the moment with amazing support – they helped me with compatibility with Yaymail.” – ⭐⭐⭐⭐⭐ Mr Bird “Friendly Author fast response to fixed the problems and high efficiency to dev “Smart” template.” – ⭐⭐⭐⭐⭐ pvpasia “Very good plugin, which is perfectly suited to WooCommerce. The support is really responsive and very competent! Do not hesitate to invest in this plugin if you want to set up an activation system.” – ⭐⭐⭐⭐⭐ Michel Pompas “Excellent Plugin: Great plugin, it works perfectly, it’s light and has great management options. Fantastic support as well. It’s worth it!” – ⭐⭐⭐⭐⭐ Therus
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C