wpdesk has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 5.4 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Products
- ShopMagic – email automation for WordPress 1
- flexible-coupons 1
- flexible-quantity-measurement-price-calculator-for-woocommerce 1
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-103367High· 8.1The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter45CVE-2026-62081Medium· 5.4Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.30CVE-2026-62136Medium· 5.3WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability29
wpdesk vulnerabilities
CVEs affecting wpdesk, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-103367High· 8.1The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter
The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for un…
▾ Twilightwpdesk · ShopMagic – email automation for WordPressEPSS 1.0%via NVD
CVE-2026-62081Medium· 5.4Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
▾ Sunlitwpdesk · flexible-couponsEPSS 0.21%via NVD
CVE-2026-62136Medium· 5.3WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions.
▾ Sunlitwpdesk · flexible-quantity-measurement-price-calculator-for-woocommerceEPSS 0.29%via CVEORG