CVE-2026-4806

Name of the Vulnerable Software and Affected Versions Custom Thank You Page for WooCommerce versions prior to 1.1.3

Description The plugin is subject to unauthorized access and data loss because the save option() function lacks a capability check. This flaw allows unauthenticated attackers to export or reset the plugin settings.

Recommendations Update the plugin to a version later than 1.1.2. As a temporary workaround, restrict access to the save option() function until the update is applied.