Wpdesk vulnerabilities

Products

• Flexible Quantity – Measurement Price Calculator For Woocommerce 4
• Flexible Refund And Return Order For Woocommerce 3
• Shopmagic 3
• Flexible Checkout Fields 2
• Flexible Pdf Coupons 2
• Flexible Subscriptions 2
• Flexible Wishlist For Woocommerce – Ecommerce Wishlist & Save For Later 2

Newest

• wp desk autopay dla woocommerce WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability CVE-2026-121571 5.3 MediumNovember 7, 2026
• wpdesk flexible chat WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability CVE-2026-116861 7.5 HighOctober 30, 2026
• wp desk flexible quantity – measurement price calculator for woocommerce WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability CVE-2026-116856 5.3 MediumOctober 29, 2026
• wp desk shopmagic WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability CVE-2026-114195 5.3 MediumOctober 22, 2026
• wp desk flexible quantity – measurement price calculator for woocommerce WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability CVE-2026-110364 5.3 MediumOctober 15, 2026
• wpdesk shopmagic – email automation for wordpress ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter CVE-2026-103367 8.1 HighOctober 14, 2026
• wp desk flexible subscriptions WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vulnerability CVE-2026-107869 4.3 MediumOctober 12, 2026
• wp desk flexible quantity – measurement price calculator for woocommerce WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability CVE-2026-106605 5.3 MediumOctober 12, 2026
• wp desk flexible pdf coupons WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-62081 5.4 MediumSeptember 30, 2026
• wpdesk flexible quantity – measurement price calculator for woocommerce WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability CVE-2026-62136 5.3 MediumSeptember 11, 2026
• wpdesk flexible subscriptions WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability CVE-2026-73364 9.8 CriticalAugust 19, 2026
• wpdesk autopay dla woocommerce WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability CVE-2026-57425 6.5 MediumJuly 23, 2026
• wpdesk flexible refund and return order for woocommerce WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability CVE-2026-57402 6.5 MediumJuly 13, 2026
• wpdesk shopmagic WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability CVE-2025-69093 5.3 MediumDecember 30, 2025
• wpdesk flexible refund and return order for woocommerce Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update CVE-2025-12621 5.3 MediumNovember 8, 2025
• wpdesk shopmagic WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability CVE-2025-59578 5.8 MediumOctober 22, 2025
• wpdesk flexible refund and return order for woocommerce Flexible Refund and Return Order for WooCommerce <= 1.0.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Refund CVE-2025-10570 4.3 MediumOctober 22, 2025
• wpdesk flexible pdf invoices for woocommerce & wordpress WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-57977 7.1 HighSeptember 22, 2025
• wpdesk flexible cookies WordPress Flexible Cookies plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-30805 4.3 MediumMarch 27, 2025
• wpdesk flexible wishlist for woocommerce – ecommerce wishlist & save for later, flexible wishlist for woocommerce +1 more Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later <= 1.2.26 - Cross-Site Request Forgery to Wishlist Creation/Modification CVE-2024-13718 4.3 MediumFebruary 18, 2025
• wpdesk flexible wishlist for woocommerce – ecommerce wishlist & save for later Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter CVE-2024-13696 7.2 HighJanuary 29, 2025
• wp desk flexible pdf coupons WordPress Flexible PDF Coupons plugin < 1.10.3 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-22825 6.5 MediumJanuary 21, 2025
• wp desk flexible checkout fields for woocommerce, wpdesk flexible checkout fields +1 more WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability CVE-2024-31267 4.3 MediumJune 9, 2024
• wpdesk flexible checkout fields, flexible checkout fields for woocommerce – woocommerce checkout manager +1 more Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update CVE-2020-36731 7.2 HighJune 7, 2023