Flexible Quantity Measurement Price Calculator For Woocommerce
Monthly
Missing authorization in the Flexible Quantity - Measurement Price Calculator for WooCommerce plugin, affecting versions through 2.3.24, can allow unauthenticated network requests to perform a low-integrity action that should be access-controlled on WordPress/WooCommerce sites. The issue is medium severity (CVSS 5.3) with no confidentiality or availability impact, and the exact vulnerable endpoint or action is not identified in the available sources; no public exploit has been identified at time of analysis and there is no KEV confirmation.
Unauthenticated remote attackers can exploit missing authorization in the WP Desk Flexible Quantity (Measurement Price Calculator for WooCommerce) plugin, versions up to and including 2.3.23, to modify a constrained set of data with low integrity impact. The flaw, tracked as CWE-862 and rated CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), requires no authentication or user interaction, but the exact affected feature is unspecified. No public exploit code or active exploitation has been identified at time of analysis.
Input data manipulation in WP Desk Flexible Quantity - Measurement Price Calculator for WooCommerce through 2.3.22 lets unauthenticated remote attackers alter submitted quantity or measurement values because the plugin does not properly validate those inputs (CWE-1284). The issue is rated CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), so impact is limited to integrity of pricing/quantity calculations, with no read, denial-of-service, or code-execution impact. No public exploit identified at time of analysis, and no CISA KEV active-exploitation entry is present in the provided data.
Broken access control in the Flexible Quantity - Measurement Price Calculator for WooCommerce plugin (WPDesk) version 2.3.21 and earlier allows unauthenticated network attackers to perform restricted actions due to missing server-side authorization checks. The vulnerability (CWE-862) results in low-severity integrity impact - likely unauthorized manipulation of quantity or pricing-related plugin functionality - without requiring credentials or user interaction. No public exploit code or active exploitation has been identified at time of analysis, and Patchstack reported this as a standard missing-authorization class issue with a CVSS base score of 5.3.
Missing authorization in the Flexible Quantity - Measurement Price Calculator for WooCommerce plugin, affecting versions through 2.3.24, can allow unauthenticated network requests to perform a low-integrity action that should be access-controlled on WordPress/WooCommerce sites. The issue is medium severity (CVSS 5.3) with no confidentiality or availability impact, and the exact vulnerable endpoint or action is not identified in the available sources; no public exploit has been identified at time of analysis and there is no KEV confirmation.
Unauthenticated remote attackers can exploit missing authorization in the WP Desk Flexible Quantity (Measurement Price Calculator for WooCommerce) plugin, versions up to and including 2.3.23, to modify a constrained set of data with low integrity impact. The flaw, tracked as CWE-862 and rated CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), requires no authentication or user interaction, but the exact affected feature is unspecified. No public exploit code or active exploitation has been identified at time of analysis.
Input data manipulation in WP Desk Flexible Quantity - Measurement Price Calculator for WooCommerce through 2.3.22 lets unauthenticated remote attackers alter submitted quantity or measurement values because the plugin does not properly validate those inputs (CWE-1284). The issue is rated CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), so impact is limited to integrity of pricing/quantity calculations, with no read, denial-of-service, or code-execution impact. No public exploit identified at time of analysis, and no CISA KEV active-exploitation entry is present in the provided data.
Broken access control in the Flexible Quantity - Measurement Price Calculator for WooCommerce plugin (WPDesk) version 2.3.21 and earlier allows unauthenticated network attackers to perform restricted actions due to missing server-side authorization checks. The vulnerability (CWE-862) results in low-severity integrity impact - likely unauthorized manipulation of quantity or pricing-related plugin functionality - without requiring credentials or user interaction. No public exploit code or active exploitation has been identified at time of analysis, and Patchstack reported this as a standard missing-authorization class issue with a CVSS base score of 5.3.