wpcodefactory has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.2 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.2
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- Customer Email Verification for WooCommerce 1
- Helpdesk Support Ticket System for WooCommerce 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-104745High· 8.1The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.057CVE-2026-11399Medium· 4.3The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled k…24
wpcodefactory vulnerabilities
CVEs affecting wpcodefactory, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-104745High· 8.1PoCThe Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_ge…
▾ Midnightwpcodefactory · Customer Email Verification for WooCommerceEPSS 0.68%via NVD
CVE-2026-11399Medium· 4.3The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled k…
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled k…
▾ Sunlitwpcodefactory · Helpdesk Support Ticket System for WooCommerceEPSS 0.16%via NVD