wpdesk vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20259
3. 20267

Newest CVEs

• CVE-2026-116861

  WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

  wpdesk · Flexible Chat

  High7.5
• CVE-2026-103367

  ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter

  wpdesk · ShopMagic – email automation for WordPress

  High8.1
• CVE-2026-62081

  WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability

  wpdesk · Flexible PDF Coupons

  Medium5.4
• CVE-2026-62136

  WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability

  wpdesk · Flexible Quantity – Measurement Price Calculator for WooCommerce

  Medium5.3
• CVE-2026-73364

  WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability

  wpdesk · Flexible Subscriptions

  Critical9.8
• CVE-2026-57425

  WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability

  wpdesk · Autopay dla WooCommerce

  Medium6.5
• CVE-2026-57402

  WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability

  wpdesk · Flexible Refund and Return Order for WooCommerce

  Medium6.5
• CVE-2025-69093

  WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability

  wpdesk · ShopMagic

  Medium5.3
• CVE-2025-12621

  Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update

  wpdesk · Flexible Refund and Return Order for WooCommerce

  Medium5.3
• CVE-2025-59578

  WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability

  wpdesk · ShopMagic

  Medium5.8