Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-4806

Custom Thank You Page for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Settings Export and Settings Reset

Description

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the save_option() function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or reset(delete) the plugin's settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

alexvtn Custom Thank You Page for WooCommerce

Default version status: unaffected

  • 0 to ≤ 1.1.2affected

References