WP Desk
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Flexible Quantity – Measurement Price Calculator for WooCommerce | 3 | – | Oct 29, 2026 |
| Custom Price for WooCommerce | 1 | – | Oct 29, 2026 |
| Dropshipping XML for WooCommerce | 1 | – | Nov 7, 2026 |
| Autopay dla WooCommerce | 1 | – | Nov 7, 2026 |
| Flexible Subscriptions | 1 | – | Oct 12, 2026 |
| ShopMagic | 1 | – | Oct 22, 2026 |
| Flexible Checkout Fields for WooCommerce | 1 | – | Jun 9, 2024 |
Exploited and recent CVEs
- CVE-2026-121571 WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability –
- CVE-2026-119525 WordPress Dropshipping XML for WooCommerce plugin <= 1.7.4 - Broken Access Control vulnerability –
- CVE-2026-115601 WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerability 0.2%
- CVE-2026-116856 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability 0.2%
- CVE-2026-114195 WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-110364 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability 0.2%
- CVE-2026-107869 WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vulnerability 0.2%
- CVE-2026-106605 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability 0.2%
- CVE-2024-31267 WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability 0.3%