Wpdesk
Vulnerability activity for Wpdesk: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighOct 30, 2026Wpdesk Flexible Chat Information disclosureCVE-2026-116861Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
- 8.1HighOct 14, 2026Wpdesk ShopMagic – email automation for WordPress Path traversal / file handlingCVE-2026-103367The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types c1% likely
- 5.4MediumSep 30, 2026Wpdesk Flexible PDF Coupons Auth bypass / access controlCVE-2026-62081Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
- 5.3MediumSep 11, 2026Wpdesk Flexible Quantity – Measurement Price Calculator for WooCommerce Auth bypass / access controlCVE-2026-62136Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions.
Top products
- ShopMagic – email automation for WordPress1 CVE in the last year
- Flexible Quantity – Measurement Price Calculator for WooCommerce1 CVE in the last year
- Flexible PDF Coupons1 CVE in the last year
- Flexible Chat1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.