Authentication vulnerability in Customer Email Verification for WooCommerce 2.9.5

A plugin called Customer Email Verification for WooCommerce on WordPress has a security issue that allows unauthorized access. This is because the plugin has a feature that creates a link to confirm an email, but it uses a placeholder email instead. This means that anyone with Contributor-level access or higher can use this link to log into any unverified user’s account. To make use of this vulnerability, the ‘Fine tune placement’ option in the plugin settings must be turned on.