CVE-2018-21007

CRITICAL 9.8CVE-2018-21007 · Published 29/08/2019 · updated 17/06/2026

In short

CVE-2018-21007 is a CRITICAL (CVSS 9.8) vulnerability affecting user email verification for woocommerce (wisetr).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.3% of all vulnerabilities.
Fix: update to 3.2.0 or later.

Package	Affected versions	Patched versions
user email verification for woocommerce wisetr	`< 3.2.0`	`3.2.0`

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.