PLUGIN SECURITY
Is User Verification by PickPlugins safe?
Ready product designer plugin for WooCommerce
What this plugin does
- Slug:
user-verification - Author: PickPlugins
- 500+ active installs
- 64/100 rating (12 reviews on wordpress.org)
- 71006 all-time downloads
- On WordPress.org since 2016-11-27
custom productproduct customizerproduct designerwoocommerce product designer
Maintenance status
- Last updated: 2026-06-08 2:51am GMT
- Tested up to WordPress: 7.0.4
Known vulnerabilities
5 known CVEs on file for User Verification by PickPlugins. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-7458 | User Verification by PickPlugins [user-verification] < 2.0.47 | Authentication Bypass Using an Alternate Path or Channel | Critical 9.8 | < 2.0.47 | 2.0.47 | 2026-05-01 | — |
| CVE-2026-14861 | User Verification by PickPlugins [user-verification] <= 2.0.47 (unfixed) | Authorization Bypass Through User-Controlled Key | Unknown | < 2.0.47 | 2.0.47 | 2026-05-01 | — |
| CVE-2026-32497 | User Verification by PickPlugins [user-verification] < 2.0.46 | Weak Authentication | Medium 5.3 | < 2.0.46 | 2.0.46 | 2026-03-23 | — |
| CVE-2025-12374 | User Verification by PickPlugins [user-verification] < 2.0.45 | Improper Authentication | Critical 9.8 | < 2.0.45 | 2.0.45 | 2025-12-04 | — |
| CVE-2022-4693 | User Verification by PickPlugins [user-verification] < 1.0.94 | Improper Authentication | Critical 9.8 | < 1.0.94 | 1.0.94 | 2022-12-28 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Product Configurator for WooCommerce — 3000+ active installs — 96/100 (42) — max PHP 8.4
- Zakeke Interactive Product Designer for WooCommerce — 2000+ active installs — 94/100 (131) — max PHP 8.4
- YayExtra – WooCommerce Extra Product Options — 1000+ active installs — 96/100 (23) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.