WordPress plugin
Thanko Thank You Page Customizer for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium7
- Low0
All Thanko Thank You Page Customizer for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤1.2.3Update to 1.2.4 | CVE-2026-103071 | |
| Medium5.3 | Missing Authorization ≤1.2.2Update to 1.2.3 | CVE-2026-81786 | |
| Medium4.3 | Missing Authorization ≤1.1.8Update to 1.1.9 | CVE-2025-66528 | |
| Medium4.3 | Missing Authorization ≤1.1.7Update to 1.1.8 | CVE-2025-30993 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Data Export ≤1.1.2Update to 1.1.3 | CVE-2024-1686 | |
| Medium5.4 | Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution ≤1.1.2Update to 1.1.3 | CVE-2024-1687 | |
| Medium4.3 | Cross-Site Request Forgery via send_email ≤1.0.13Update to 1.0.14 | CVE-2022-46812 |
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤1.2.3Update to 1.2.4
- Medium5.3Missing Authorization
≤1.2.2Update to 1.2.3
- Medium4.3Missing Authorization
≤1.1.8Update to 1.1.9
- Medium4.3Missing Authorization
≤1.1.7Update to 1.1.8
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Data Export
≤1.1.2Update to 1.1.3
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
≤1.1.2Update to 1.1.3
- Medium4.3Cross-Site Request Forgery via send_email
≤1.0.13Update to 1.0.14
Thanko Thank You Page Customizer for WooCommerce: common questions
Does Thanko Thank You Page Customizer for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Thanko Thank You Page Customizer for WooCommerce: 7 medium. None are known to affect version null.
How do I check which version of Thanko Thank You Page Customizer for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Thanko Thank You Page Customizer for WooCommerce vulnerability?
CVE-2026-103071, published Oct 8, 2026: Thanko Thank You Page Customizer for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary Shortcode Execution. Severity: Medium (CVSS 6.5).
Is any Thanko Thank You Page Customizer for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Thanko Thank You Page Customizer for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.