{"vulnerability": "CVE-2026-103071", "sightings": [{"uuid": "82f88f39-7680-4db6-9839-b759ecd45b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417721889033547", "content": "CVE-2026-103071 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103071https://patchstack.com/database/wordpress/plugin/woo-thank-you-page-customizer/vulnerability/wordpress-thank-you-page-customizer-for-woocommerce-plugin-1-2-3-content-injection-vulnerability?_s_id=cve#VillaTheme #ThankYouPageCustomizerforWooCommerce#CVE_2026_103071#bot", "creation_timestamp": "2026-10-10T17:10:51.210862Z"}, {"uuid": "7c300e8a-cbf7-4e43-b8e4-651091758580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxjzefqbdh2g", "content": "\ud83d\udfe0 CVE-2026-103071 - High (7.5)\n\nImproper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103071/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T17:31:12.629260Z"}, {"uuid": "b15b7070-ae34-4544-b6c5-e9eb5676974c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2lujjnghjfff2", "content": "CVE-2026-103071 - WordPress Thank You Page Customizer for WooCommerce plugin\nCVE ID : CVE-2026-103071\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Cus...", "creation_timestamp": "2026-10-10T17:55:09.640976Z"}, {"uuid": "0fa4e2b8-3ce9-4d85-8a2b-77c2474513dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk2yekknc2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-103071 \u00b7 1 person\n2. CVE-2026-104398 \u00b7 1 person\n3. CVE-2026-108161 \u00b7 1 person", "creation_timestamp": "2026-10-10T18:00:16.517466Z"}, {"uuid": "4abd9aac-fb2c-4601-8b88-86e5e08bb4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.329227Z"}, {"uuid": "8926536a-6df8-4c7d-8ea2-f59facaa9d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4jugei22n", "content": "5. CVE-2026-103071 \u00b7 1 person\n\ud83d\udfe7 High 7.5 \u00b7 VillaTheme Thank You Page Customizer for WooCommerce\n\nWordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability", "creation_timestamp": "2026-10-10T18:27:59.590712Z"}, {"uuid": "6b18cc19-7de8-4c92-bca6-7062e63d4a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103071", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxkgqtmiu22x", "content": "WooCommerce Thank You Page Customizer\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30b5\u30a4\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-103071 CVSS 7.5 | HIGH", "creation_timestamp": "2026-10-10T21:30:48.260691Z"}]}