Skip to content
OpenAdvisories
High · 7.5 CVE-2026-103071 EUVD-2026-96379GHSA-22j3-c3px-m76x

WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.

Affected products

VendorProductAffectedFixed
VillaTheme Thank You Page Customizer for WooCommerce ≤ 1.2.3 —

References