CVE-2026-81786

HighCVSS 7.5

Published: 10/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 10/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

The Thank You Page Customizer for WooCommerce plugin in versions up to and including 1.2.2 contains a broken access control flaw that allows an unauthenticated attacker to perform unauthorized operations.

Risk Assessment

An unauthenticated attacker could exploit the flaw to perform actions they are not authorized for, potentially resulting in configuration changes or store data disclosure.

Recommendation

Update the Thank You Page Customizer for WooCommerce plugin to a version newer than 1.2.2 or disable it if a fix is not yet available.

Other vulnerabilities in Thank You Page Customizer for WooCommerce

CVE-2025-66528Medium
The Thank You Page Customizer for WooCommerce plugin (versions up to and including 1.1.8) contains a Missing Authorization vulnerability due to incorrectly configured access control security levels. This enables unauthorized users to perform protected operations.

Original NVD description (English source)

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS