Customer Email Verification for WooCommerce Security & Risk Analysis

wordpress.org/plugins/customer-email-verification-for-woocommerce

Secure WooCommerce registrations with OTP-based email verification, reducing spam and ensuring only valid email addresses are used.

2K active installs v2.6.9 PHP 7.2+ WP 5.3+ Updated Feb 17, 2026
customer-verificationemail-address-verificationregistration-verificationwoocommercewoocommerce-signup-spam
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Customer Email Verification for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Customer Email Verification for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'customer-email-verification-for-woocommerce' plugin v2.6.9 presents a generally good security posture based on the static analysis. It demonstrates strong adherence to secure coding practices by utilizing prepared statements for all SQL queries and properly escaping a high percentage of its output. The absence of dangerous functions, file operations, and a history of zero known vulnerabilities further contribute to a positive security assessment. The plugin also incorporates a healthy number of nonce and capability checks across its entry points, indicating an effort to protect against common WordPress attacks.

Key Concerns

  • Taint flows with unsanitized paths found (4)
  • High severity taint flows found (4)
  • External HTTP request without clear security context
Vulnerabilities
None known

Customer Email Verification for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Customer Email Verification for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
16 prepared
Unescaped Output
9
229 escaped
Nonce Checks
13
Capability Checks
2
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared16 total queries

Output Escaping

96% escaped238 total outputs
Data Flows
4 unsanitized

Data Flow Analysis

9 flows4 with unsanitized paths
cev_settings_form_update_fun (includes\class-wc-customer-email-verification-admin.php:602)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Customer Email Verification for WooCommerce Attack Surface

Entry Points12
Unprotected0

AJAX Handlers 11

authwp_ajax_cev_settings_form_updateincludes\class-wc-customer-email-verification-admin.php:42
authwp_ajax_cev_manualy_user_verify_in_user_menuincludes\class-wc-customer-email-verification-admin.php:63
authwp_ajax_delete_userincludes\class-wc-customer-email-verification-admin.php:66
authwp_ajax_delete_usersincludes\class-wc-customer-email-verification-admin.php:67
noprivwp_ajax_cev_verify_user_email_with_pinincludes\class-wc-customer-email-verification-email.php:61
authwp_ajax_cev_verify_user_email_with_pinincludes\class-wc-customer-email-verification-email.php:62
noprivwp_ajax_check_email_existsincludes\class-wc-customer-email-verification-signup.php:51
authwp_ajax_verify_otpincludes\class-wc-customer-email-verification-signup.php:54
noprivwp_ajax_verify_otpincludes\class-wc-customer-email-verification-signup.php:55
authwp_ajax_resend_otpincludes\class-wc-customer-email-verification-signup.php:58
noprivwp_ajax_resend_otpincludes\class-wc-customer-email-verification-signup.php:59

Shortcodes 1

[customer_email_verification_code] includes\class-wc-customer-email-verification-email.php:54
WordPress Hooks 67
actioninitcustomer-email-verification-for-woocommerce.php:69
actionadmin_initcustomer-email-verification-for-woocommerce.php:128
actionadmin_menucustomer-email-verification-for-woocommerce.php:200
actionadmin_enqueue_scriptscustomer-email-verification-for-woocommerce.php:203
filterwoocommerce_account_menu_itemscustomer-email-verification-for-woocommerce.php:204
filterwoocommerce_account_menu_itemscustomer-email-verification-for-woocommerce.php:205
actioninitcustomer-email-verification-for-woocommerce.php:206
actionwoocommerce_account_email-verification_endpointcustomer-email-verification-for-woocommerce.php:207
actionwp_enqueue_scriptscustomer-email-verification-for-woocommerce.php:208
actioninitcustomer-email-verification-for-woocommerce.php:495
actionbefore_woocommerce_initcustomer-email-verification-for-woocommerce.php:500
actionadmin_noticesincludes\cev-wc-admin-notices.php:40
actionadmin_initincludes\cev-wc-admin-notices.php:43
filtermanage_users_columnsincludes\class-wc-customer-email-verification-admin.php:43
filtermanage_users_custom_columnincludes\class-wc-customer-email-verification-admin.php:44
actionshow_user_profileincludes\class-wc-customer-email-verification-admin.php:45
actionedit_user_profileincludes\class-wc-customer-email-verification-admin.php:46
actionadmin_headincludes\class-wc-customer-email-verification-admin.php:47
actionrestrict_manage_usersincludes\class-wc-customer-email-verification-admin.php:50
filterpre_get_usersincludes\class-wc-customer-email-verification-admin.php:51
filterbulk_actions-usersincludes\class-wc-customer-email-verification-admin.php:54
filterhandle_bulk_actions-usersincludes\class-wc-customer-email-verification-admin.php:55
actionadmin_noticesincludes\class-wc-customer-email-verification-admin.php:56
filteradmin_body_classincludes\class-wc-customer-email-verification-admin.php:60
actionadmin_noticesincludes\class-wc-customer-email-verification-admin.php:751
actionadmin_noticesincludes\class-wc-customer-email-verification-admin.php:755
actionadmin_noticesincludes\class-wc-customer-email-verification-admin.php:772
filtercev_verification_popup_headingincludes\class-wc-customer-email-verification-customize.php:55
filtercev_verification_popup_messageincludes\class-wc-customer-email-verification-customize.php:56
filterwc_cev_decode_html_contentincludes\class-wc-customer-email-verification-email-common.php:21
filterverification_email_email_bodyincludes\class-wc-customer-email-verification-email-common.php:22
actionwoocommerce_created_customer_notificationincludes\class-wc-customer-email-verification-email.php:55
actionwpincludes\class-wc-customer-email-verification-email.php:56
filterwoocommerce_registration_redirectincludes\class-wc-customer-email-verification-email.php:57
filterwcalr_register_user_successfulincludes\class-wc-customer-email-verification-email.php:58
actionwpincludes\class-wc-customer-email-verification-email.php:59
actionwpincludes\class-wc-customer-email-verification-email.php:60
actionuser_registerincludes\class-wc-customer-email-verification-email.php:63
actionpassword_resetincludes\class-wc-customer-email-verification-email.php:64
actioninitincludes\class-wc-customer-email-verification-installation.php:14
actionwp_enqueue_scriptsincludes\class-wc-customer-email-verification-preview-front.php:52
actiontemplate_redirectincludes\class-wc-customer-email-verification-preview-front.php:53
filtercev_verification_popup_messageincludes\class-wc-customer-email-verification-preview-front.php:54
actioninitincludes\class-wc-customer-email-verification-signup.php:16
actionwp_enqueue_scriptsincludes\class-wc-customer-email-verification-signup.php:45
actionwoocommerce_before_customer_login_formincludes\class-wc-customer-email-verification-signup.php:48
actionwpincludes\class-wc-customer-email-verification-signup.php:62
actioncustomize_registerincludes\customizer\class-cev-customizer.php:16
actioncustomize_registerincludes\customizer\class-cev-customizer.php:23
filtercustomize_loaded_componentsincludes\customizer\class-cev-customizer.php:24
filtercustomize_section_activeincludes\customizer\class-cev-customizer.php:25
actionwoomail_footerincludes\customizer\class-cev-customizer.php:26
actioncustomize_preview_initincludes\customizer\class-cev-customizer.php:27
filtercustomize_controls_enqueue_scriptsincludes\customizer\class-cev-customizer.php:28
actionparse_requestincludes\customizer\class-cev-customizer.php:29
actioncustomize_preview_initincludes\customizer\class-cev-customizer.php:30
actioncustomize_registerincludes\customizer\verification-widget-message.php:19
actioncustomize_registerincludes\customizer\verification-widget-message.php:27
filtercustomize_loaded_componentsincludes\customizer\verification-widget-message.php:30
filtercustomize_section_activeincludes\customizer\verification-widget-message.php:33
actionwoomail_footerincludes\customizer\verification-widget-message.php:36
actioncustomize_preview_initincludes\customizer\verification-widget-message.php:39
filtercustomize_controls_enqueue_scriptsincludes\customizer\verification-widget-message.php:42
actioncustomize_preview_initincludes\customizer\verification-widget-message.php:46
actionadmin_enqueue_scriptszorem-tracking\zorem-tracking.php:39
actioninitzorem-tracking\zorem-tracking.php:78
actionadmin_initzorem-tracking\zorem-tracking.php:80
Maintenance & Trust

Customer Email Verification for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 17, 2026
PHP min version7.2
Downloads63K

Community Trust

Rating88/100
Number of ratings19
Active installs2K
Developer Profile

Customer Email Verification for WooCommerce Developer Profile

Zorem

4 plugins · 70K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
274 days
View full developer profile
Detection Fingerprints

How We Detect Customer Email Verification for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/customer-email-verification-for-woocommerce/assets/css/admin.css/wp-content/plugins/customer-email-verification-for-woocommerce/assets/css/frontend.css/wp-content/plugins/customer-email-verification-for-woocommerce/assets/css/woo-customer-email-verification-style.css/wp-content/plugins/customer-email-verification-for-woocommerce/assets/js/admin.js/wp-content/plugins/customer-email-verification-for-woocommerce/assets/js/front.js
Script Paths
/wp-content/plugins/customer-email-verification-for-woocommerce/assets/js/front.js
Version Parameters
customer-email-verification-for-woocommerce/assets/css/admin.css?ver=customer-email-verification-for-woocommerce/assets/css/frontend.css?ver=customer-email-verification-for-woocommerce/assets/css/woo-customer-email-verification-style.css?ver=customer-email-verification-for-woocommerce/assets/js/admin.js?ver=customer-email-verification-for-woocommerce/assets/js/front.js?ver=

HTML / DOM Fingerprints

CSS Classes
cev-account-section
HTML Comments
<!-- START CEV Customizer Scripts --><!-- END CEV Customizer Scripts --><!-- CEV Shortcode: Email Verification Status -->
Data Attributes
data-cev-ajax-urldata-cev-ajax-nonce
JS Globals
cev_ajax_object
Shortcode Output
[cev_status]
FAQ

Frequently Asked Questions about Customer Email Verification for WooCommerce