Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product User Verification Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-14861 1 Wordpress-extensions 1 User Verification 2026-11-11 7.5 High
The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification status and lock them, including administrators, out of their accounts.