Lucene search
+L

83 matches found

NVD
NVD
added 2026/09/10 3:17 p.m.3 views

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 2:23 p.m.9 views

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

7.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 2:23 p.m.5 views

EUVD-2026-75519

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

7.5CVSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/08 12:16 p.m.4 views

WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tony Harris in WordPress Plugin Thank You Page Customizer for WooCommerce versions = 1.2.2...

7.5CVSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/02 1:26 p.m.4 views

CVE-2026-0703

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/02 1:26 p.m.52 views

CVE-2026-0703 NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.00192EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/02 1:26 p.m.6 views

CVE-2026-0703 NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwctycurrentdate' shortcode in all versions up to, and including, 2.23.0 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.00192EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/02 12:00 a.m.17 views

WordPress plugin NextMove Lite – Thank You Page for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00192EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/01 9:15 a.m.13 views

WordPress Thank You Page for WooCommerce plugin <= 4.2.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Thanks Redirect for WooCommerce versions = 4.2.0...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.9 views

CVE-2025-68048

Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through = 2.23.0...

7.5CVSS5.5AI score0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.4 views

CVE-2025-68048 WordPress NextMove Lite plugin <= 2.23.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through = 2.23.0...

5.3AI score0.00291EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.13 views

WordPress Contact Form 7 Redirect & Thank You Page plugin <= 1.0.7 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Contact Form 7 Redirect & Thank You Page versions = 1.0.7...

6.1CVSS5.4AI score0.0036EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/10 2:22 p.m.11 views

CVE-2025-66528

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

4.3CVSS6.7AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.11 views

EUVD-2025-202144

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

6.2AI score0.00234EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.10 views

CVE-2025-66528

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

4.3CVSS0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.34 views

CVE-2025-66528 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

4.3CVSS0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.22 views

CVE-2025-66528

CVE-2025-66528 refers to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin "Thank You Page Customizer for WooCommerce" (woo-thank-you-page-customizer), affecting versions

4.3CVSS6.3AI score0.00234EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.3 views

CVE-2025-66528 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

6.3AI score0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.15 views

PT-2025-49876

Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through = 1.1.8...

8.1CVSS6.7AI score0.00234EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

WordPress plugin Thank You Page Customizer for WooCommerce 安全漏洞

...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References1
Rows per page
Query Builder