Alexvtn vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Alexvtn products: 1 record(s), with severity, exploitation and fixes.

Custom Thank You Page for WooCommerce 1

Exploited only (KEV) →

CVE-2026-4806 Medium · 6.5 CWE-862 Sep 24, 2026

Custom Thank You Page for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Settings Export and Settings Reset

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the save_option() function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or reset(delete) the plugin's settings.