CVE-2025-30993

{"id": "CVE-2025-30993", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-08-14T11:15:32.963", "references": [{"url": "https://patchstack.com/database/wordpress/plugin/woo-thank-you-page-customizer/vulnerability/wordpress-thank-you-page-customizer-for-woocommerce-increase-your-sales-1-1-7-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales: from n/a through 1.1.7."}, {"lang": "es", "value": "La vulnerabilidad de falta de autorizaci\u00f3n en el VillaTheme Thank You Page Customizer para WooCommerce \u2013 Increase Your Sales permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a VillaTheme Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales: desde n/d hasta la versi\u00f3n 1.1.7."}], "lastModified": "2025-08-14T13:11:53.633", "sourceIdentifier": "audit@patchstack.com"}