wpdesk

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

wpdesk records in CISA KEV

No wpdesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flexible Checkout Fields 2 records MEDIUM Flexible Wishlist For Woocommerce 1 record LOW

Records

2 records in Flexible Checkout Fields · all components

TI-2020-18902 CVE-2020-36731 · GHSA-x5rc-5886-54gw

Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update

MEDIUM 40

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01342 Published 2023-06-07 Fixed in 2.3.2 CWE-79

TI-2024-20643 CVE-2024-31267 · GHSA-m63c-qqgh-g8hh

WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-09 No fix listed CWE-862

Open these records in search →

Critical	1
High	6
Medium	19
Low	0
No CVSS	0