pickplugins User Verification vulnerabilities

Latest pickplugins User Verification CVEs

Newest publication first

1. CVE-2026-32497 WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability

   Published 2026-03-25

   Medium·CVSS 5.3

   Weak Authentication vulnerability in PickPlugins User Verification user-verification allows Authentication Abuse.This issue affects User Verification: from n/a through <= 2.0.45.

2. CVE-2022-4693 User Verification < 1.0.94 - Authentication Bypass

   Published 2023-01-23

   Critical·CVSS 9.8

   The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we m...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.