Wpdesk
13 CVEs across 10 Wpdesk products. Browse Wpdesk vulnerabilities, severities, and proof-of-concept exploits.
Wpdesk products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57425 | Medium | 6.5 | 2026-07-23 | Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. |
CVE-2026-57402 | Medium | 6.5 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce f… |
CVE-2025-69093 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-12621 | Medium | 5.3 | 2025-11-08 | The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability… |
CVE-2025-59578 | Medium | 5.8 | 2025-10-22 | Insertion of Sensitive Information Into Sent Data vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issu… |
CVE-2025-10570 | Medium | 4.3 | 2025-10-22 | The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 v… |
CVE-2025-57977 | High | 7.1 | 2025-09-22 | Cross-Site Request Forgery (CSRF) vulnerability in wpdesk Flexible PDF Invoices for WooCommerce & WordPress flexible-invoices allows Cross Site Request Forgery… |
CVE-2025-30805 | Medium | 4.3 | 2025-03-27 | Cross-Site Request Forgery (CSRF) vulnerability in wpdesk Flexible Cookies flexible-cookies allows Cross Site Request Forgery.This issue affects Flexible Cooki… |
CVE-2024-13718 | Medium | 4.3 | 2025-02-18 | The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… |
CVE-2024-13696 | High | 7.2 | 2025-01-29 | The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wishlist… |
CVE-2025-22825 | Medium | 6.5 | 2025-01-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible PDF Coupons flexible-coupons allows Store… |
CVE-2024-31267 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a t… |
CVE-2020-36731 | High | 7.2 | 2023-06-07 | The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cro… |