WP
Vendor
wpdesk
18
CVEs
0
On KEV
2
New 30D
Products
FP6.5
Flexible PDF Coupons
wpdesk
2 CVEs0 on KEV1 new
SE8.1
ShopMagic – email automation for WordPress
wpdesk
1 CVEs0 on KEV1 new
FR6.5
Flexible Refund and Return Order for WooCommerce
wpdesk
3 CVEs0 on KEV0 new
FC8.8
Flexible Checkout Fields
Wpdesk
2 CVEs0 on KEV0 new
FW7.2
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later
wpdesk
2 CVEs0 on KEV0 new
SH5.8
ShopMagic
wpdesk
2 CVEs0 on KEV0 new
AD6.5
Autopay dla WooCommerce
wpdesk
1 CVEs0 on KEV0 new
FC4.3
Flexible Cookies
wpdesk
1 CVEs0 on KEV0 new
FP7.1
Flexible PDF Invoices for WooCommerce & WordPress
wpdesk
1 CVEs0 on KEV0 new
FQ5.3
Flexible Quantity – Measurement Price Calculator for WooCommerce
wpdesk
1 CVEs0 on KEV0 new
FS9.8
Flexible Subscriptions
wpdesk
1 CVEs0 on KEV0 new
FW4.3
Flexible Wishlist For Woocommerce
Wpdesk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103367 | SE ShopMagic – email automation for WordPress wpdesk | 8.1 | Oct 14 | ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter |
| CVE-2026-62081 | FP Flexible PDF Coupons wpdesk | 5.4 | Sep 30 | WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-62136 | FQ Flexible Quantity – Measurement Price Calculator for WooCommerce wpdesk | 5.3 | Sep 11 | WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability |
| CVE-2026-73364 | FS Flexible Subscriptions wpdesk | 9.8 | Aug 19 | WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability |
| CVE-2026-57425 | AD Autopay dla WooCommerce wpdesk | 6.5 | Jul 23 | WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability |
| CVE-2026-57402 | FR Flexible Refund and Return Order for WooCommerce wpdesk | 6.5 | Jul 13 | WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69093 | SH ShopMagic wpdesk | 5.3 | Dec 30 | WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability |
| CVE-2025-12621 | FR Flexible Refund and Return Order for WooCommerce wpdesk | 5.3 | Nov 8 | Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update |
| CVE-2025-59578 | SH ShopMagic wpdesk | 5.8 | Oct 22 | WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability |
| CVE-2025-10570 | FR Flexible Refund and Return Order for WooCommerce wpdesk | 4.3 | Oct 22 | Flexible Refund and Return Order for WooCommerce <= 1.0.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Refund |
| CVE-2025-57977 | FP Flexible PDF Invoices for WooCommerce & WordPress wpdesk | 7.1 | Sep 22 | WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-30805 | FC Flexible Cookies wpdesk | 4.3 | Mar 27 | WordPress Flexible Cookies plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-13718 | FW Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later wpdesk | 4.3 | Feb 18 | Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later <= 1.2.26 - Cross-Site Request Forgery to Wishlist Creation/Modification |
| CVE-2024-13696 | FW Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later wpdesk | 7.2 | Jan 29 | Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter |
| CVE-2025-22825 | FP Flexible PDF Coupons wpdesk | 6.5 | Jan 21 | WordPress Flexible PDF Coupons plugin < 1.10.3 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2024-31267 | FC Flexible Checkout Fields Wpdesk | 8.8 | Jun 9 | WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability |
| CVE-2020-36731 | FC Flexible Checkout Fields Wpdesk | 6.1 | Jun 7 | The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in… |