WordPress security by component
User Verification by PickPlugins
Plugin description
User Verification by PickPlugins is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published May 02, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
user-verificationLatest vulnerability
CVE-2026-7458: User Verification by PickPlugins: Privilege escalation or authentication bypass
User Verification by PickPlugins is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 2.0.46.
| Safe version |
|
||
|---|---|---|---|
| May 02, 2026 |
CVE-2026-7458
User Verification by PickPlugins: Privilege escalation or authentication bypass
User Verification by PickPlugins is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 2.0.46.
|
> 2.0.46 |
CVE9.8
NVDPending
|
| Mar 25, 2026 |
CVE-2026-32497
User Verification: A security weakness
User Verification is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through <= 2.0.45.
|
2.0.46 |
CVE5.3
NVDPending
|
| Dec 05, 2025 |
CVE-2025-12374
Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification: Privilege escalation or authentication bypass
Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Jan 23, 2023 |
CVE-2022-4693
User Verification: A security weakness
User Verification is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE9.8
NVD9.8
|