Approved changes feed: RSS · Atom

cpe:2.3:a:villatheme:thank_you_page_customizer_for_woocommerce_–_increase_your_sales:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVillatheme (f6e46fcf-f7b5-547b-bdd5-2c693fe77a08)
ProductThank You Page Customizer For Woocommerce – Increase Your Sales (7949b897-ec7a-5971-9a35-3ed8f36ad164)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1687 vulnerable 2026-06-03 14:54:34.293141 Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
MEDIUM (5.4)
The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the get_text_editor_content() function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.
Published: 2024-02-27T05:33:11.820Z
Updated: 2026-04-08T16:44:59.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1686 vulnerable 2026-06-03 14:54:34.290571 Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export
MEDIUM (4.3)
The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the apply_layout function due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve arbitrary order data which may contain PII.
Published: 2024-02-27T05:33:11.199Z
Updated: 2026-04-08T16:44:24.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46812 vulnerable 2026-06-03 14:48:26.524557 WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions.
Published: 2023-05-25T08:48:57.552Z
Updated: 2025-01-08T22:01:27.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46810 vulnerable 2026-06-03 14:48:26.519052 WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin <= 1.0.13 versions.
Published: 2023-05-25T11:18:45.414Z
Updated: 2026-04-28T16:07:54.716Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.