CVE-2021-34646

Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function found in the ~/includes/class-wcj-emails-verification.php file. This allows attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts, and automatically be logged in as that user, including any site administrators. This requires the Email Verification module to be active in the plugin and the Login User After Successful Verification setting to be enabled, which it is by default.

• CWE-290
• CWE-330

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2581212%40woocommerce-jetpack&new=2581212%40woocommerce-jetpack&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/blog/2021/08/critical-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2581212%40woocommerce-jetpack&new=2581212%40woocommerce-jetpack&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/blog/2021/08/critical-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/Exploit, Third Party Advisory

Published

Aug 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34640The Securimage-WP-Fixed WordPress plugin is vulnerable to Re…6.1
• CVE-2021-34641The SEOPress WordPress plugin is vulnerable to Stored Cross-…5.4
• CVE-2021-34642The Smart Email Alerts WordPress plugin is vulnerable to Ref…6.1
• CVE-2021-34643The Skaut bazar WordPress plugin is vulnerable to Reflected …6.1
• CVE-2021-34644The Multiplayer Games WordPress plugin is vulnerable to Refl…6.1
• CVE-2021-34645The Shopping Cart & eCommerce Store WordPress plugin is vuln…8.8
• CVE-2021-34647The Ninja Forms WordPress plugin is vulnerable to sensitive …6.5
• CVE-2021-34648The Ninja Forms WordPress plugin is vulnerable to arbitrary …4.3
• CVE-2021-34649The Simple Behance Portfolio WordPress plugin is vulnerable …6.1
• CVE-2021-3465Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-34650The eID Easy WordPress plugin is vulnerable to Reflected Cro…6.1
• CVE-2021-34651The Scribble Maps WordPress plugin is vulnerable to Reflecte…6.1