CVE-2026-81786
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The Thank You Page Customizer for WooCommerce plugin in versions up to and including 1.2.2 contains a broken access control flaw that allows an unauthenticated attacker to perform unauthorized operations.
Risk Assessment
An unauthenticated attacker could exploit the flaw to perform actions they are not authorized for, potentially resulting in configuration changes or store data disclosure.
Recommendation
Update the Thank You Page Customizer for WooCommerce plugin to a version newer than 1.2.2 or disable it if a fix is not yet available.
Other vulnerabilities in Thank You Page Customizer for WooCommerce
See all- CVE-2026-103071High
Code injection vulnerability in the Thank You Page Customizer for WooCommerce plugin. Allows code injection. Affects versions up to 1.2.3.
- CVE-2025-66528Medium
The Thank You Page Customizer for WooCommerce plugin (versions up to and including 1.1.8) contains a Missing Authorization vulnerability due to incorrectly configured access control security levels. This enables unauthorized users to perform protected operations.
Original NVD description (English source)
Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS