一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月24日

CVE-2026-4806 [MEDIUM] – The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthoriz

未分类
📑 文章目录

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the save_option() function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or reset(delete) the plugin’s settings.