Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autopay dla WooCommerce: from n/a through 2.3.0.
Vendor
WP Desk vulnerabilities
9 published CVES affecting WP Desk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 9
- Critical
- 0
- High
- 1
- Medium
- 8
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Flexible Quantity – Measurement Price Calculator for WooCommerce 3
- Autopay dla WooCommerce 1
- Custom Price for WooCommerce 1
- Dropshipping XML for WooCommerce 1
- Flexible Checkout Fields for WooCommerce 1
- Flexible Subscriptions 1
- ShopMagic 1
Latest WP Desk CVEs
Newest publication first
-
MediumCVSS 5.3 EPSS 0.23%
-
MediumCVSS 4.3 EPSS 0.20%
Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dropshipping XML for WooCommerce: from n/a through 1.7.4.
-
MediumCVSS 5.3 EPSS 0.18%
Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Price for WooCommerce: from n/a through 1.1.29.
-
MediumCVSS 5.3 EPSS 0.23%
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quant...
-
CVE-2026-114195 WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
PublishedMediumCVSS 5.3 EPSS 0.27%Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.
-
MediumCVSS 5.3 EPSS 0.21%
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quant...
-
MediumCVSS 4.3 EPSS 0.15%
Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Subscriptions: from n/a through 1.8.4.
-
MediumCVSS 5.3 EPSS 0.18%
Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Input Data Manipulation.This issue affects Flexible Quantity – Measur...
-
HighCVSS 8.8 EPSS 0.32%
Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.