Skip to content
OpenAdvisories

Vendor

wpdesk

17 known vulnerabilities.

Products

Flexible Refund and Return Order for WooCommerce 3 Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later 2 ShopMagic 2 Flexible PDF Coupons 2 Autopay dla WooCommerce 1 Flexible Cookies 1 ShopMagic – email automation for WordPress 1 Flexible Quantity – Measurement Price Calculator for WooCommerce 1 Flexible Chat 1 Flexible Subscriptions 1 Flexible PDF Invoices for WooCommerce & WordPress 1 Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-116861

    WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.

    wpdesk Flexible Chat
  • High 8.1
    CVE-2026-103367

    ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter

    The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attacker…

    wpdesk ShopMagic – email automation for WordPress Web / CMS
  • High 7.1
    CVE-2025-57977

    WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpdesk Flexible PDF Invoices for WooCommerce & WordPress flexible-invoices allows Cross Site Request Forgery.This issue affects Flexible PDF Invoices for WooCommerce & WordPress: from n/a through <= 6.0.13.

    wpdesk Flexible PDF Invoices for WooCommerce & WordPress Web / CMS
  • High 7.2
    CVE-2024-13696

    Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter

    The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wishlist_name’ parameter in all versions up to, and including, 1.2.25 due to insufficient input sanitization…

    wpdesk Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later Web / CMS
  • High 7.2
    CVE-2020-36731 Scanner template

    Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update

    The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization check…

    wpdesk Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager Web / CMS