{"schema_version":1,"title":"WP Desk vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in WP Desk: 2 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121571, was published on 7 November 2026. 8 vulnerabilities in the last four weeks, up 300% on the four before (2). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/wp-desk","json_url":"https://junglewise.ai/threats/vendors/wp-desk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/wp-desk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":1,"all_time":13,"critical":0,"exploited":0,"last_7_days":2,"last_30_days":6,"last_90_days":11,"last_365_days":13},"latest":[{"cve":"CVE-2026-121571","cvss":5.3,"slug":"cve-2026-121571-missing-authorization-vulnerability-in-wp-desk-autopay-dla","title":"WP Desk Autopay dla WooCommerce access control bypass","severity":"medium","exploited":false,"published_at":"2026-11-07T11:17:00.333+00:00","url":"https://junglewise.ai/threats/cve-2026-121571-missing-authorization-vulnerability-in-wp-desk-autopay-dla"},{"cve":"CVE-2026-119525","cvss":4.3,"slug":"cve-2026-119525-missing-authorization-vulnerability-in-wp-desk-dropshipping-xml","title":"WP Desk Dropshipping XML for WooCommerce broken access control","severity":"medium","exploited":false,"published_at":"2026-11-07T11:16:59.553+00:00","url":"https://junglewise.ai/threats/cve-2026-119525-missing-authorization-vulnerability-in-wp-desk-dropshipping-xml"},{"cve":"CVE-2026-116861","cvss":7.5,"slug":"cve-2026-116861-unauthenticated-sensitive-data-exposure-in-flexible-chat-1-1-0","title":"Flexible Chat sensitive data exposure","severity":"high","exploited":false,"published_at":"2026-10-30T19:18:15.427+00:00","url":"https://junglewise.ai/threats/cve-2026-116861-unauthenticated-sensitive-data-exposure-in-flexible-chat-1-1-0"},{"cve":"CVE-2026-116856","cvss":5.3,"slug":"cve-2026-116856-missing-authorization-vulnerability-in-wp-desk-flexible-quantity","title":"WP Desk Flexible Quantity , Measurement Price Calculator broken access control","severity":"medium","exploited":false,"published_at":"2026-10-29T15:17:20.433+00:00","url":"https://junglewise.ai/threats/cve-2026-116856-missing-authorization-vulnerability-in-wp-desk-flexible-quantity"},{"cve":"CVE-2026-115601","cvss":5.3,"slug":"cve-2026-115601-missing-authorization-vulnerability-in-wp-desk-custom-price-for","title":"WP Desk Custom Price for WooCommerce broken access control","severity":"medium","exploited":false,"published_at":"2026-10-29T15:17:17.08+00:00","url":"https://junglewise.ai/threats/cve-2026-115601-missing-authorization-vulnerability-in-wp-desk-custom-price-for"},{"cve":"CVE-2026-114195","cvss":5.3,"slug":"cve-2026-114195-insertion-of-sensitive-information-into-externally-accessible","title":"WP Desk ShopMagic sensitive information exposure in accessible files","severity":"medium","exploited":false,"published_at":"2026-10-22T09:17:15.08+00:00","url":"https://junglewise.ai/threats/cve-2026-114195-insertion-of-sensitive-information-into-externally-accessible"},{"cve":"CVE-2026-107869","cvss":4.3,"epss":0.0019,"slug":"cve-2026-107869-missing-authorization-vulnerability-in-wp-desk-flexible","title":"WP Desk Flexible Subscriptions broken access control","severity":"medium","exploited":false,"published_at":"2026-10-12T09:16:42.577+00:00","url":"https://junglewise.ai/threats/cve-2026-107869-missing-authorization-vulnerability-in-wp-desk-flexible"},{"cve":"CVE-2026-106605","cvss":5.3,"epss":0.0019,"slug":"cve-2026-106605-improper-validation-of-specified-quantity-in-input-vulnerability","title":"WP Desk Flexible Quantity Calculator improper input validation","severity":"medium","exploited":false,"published_at":"2026-10-12T08:17:18.18+00:00","url":"https://junglewise.ai/threats/cve-2026-106605-improper-validation-of-specified-quantity-in-input-vulnerability"},{"cve":"CVE-2026-62081","cvss":5.4,"slug":"cve-2026-62081-contributor-insecure-direct-object-references-idor-in-flexible","title":"Flexible PDF Coupons IDOR in contributor functions","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:19.453+00:00","url":"https://junglewise.ai/threats/cve-2026-62081-contributor-insecure-direct-object-references-idor-in-flexible"},{"cve":"CVE-2026-92425","cvss":5.5,"epss":0.0031,"slug":"cve-2026-92425-the-hydra-booking-appointment-scheduling-booking-calendar","title":"Hydra Booking insecure direct object reference in host management","severity":"medium","exploited":false,"published_at":"2026-09-19T07:16:34.1+00:00","url":"https://junglewise.ai/threats/cve-2026-92425-the-hydra-booking-appointment-scheduling-booking-calendar"},{"cve":"CVE-2026-62136","cvss":5.3,"epss":0.0029,"slug":"cve-2026-62136-wp-desk-flexible-quantity-measurement-price-calculator-broken","title":"WP Desk Flexible Quantity , Measurement Price Calculator broken access control","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.01+00:00","url":"https://junglewise.ai/threats/cve-2026-62136-wp-desk-flexible-quantity-measurement-price-calculator-broken"},{"cve":"CVE-2026-57425","cvss":6.5,"slug":"cve-2026-57425-wp-desk-autopay-dla-woocommerce-broken-access-control","title":"WP Desk Autopay dla WooCommerce broken access control","severity":"medium","exploited":false,"published_at":"2026-07-23T12:18:28.683+00:00","url":"https://junglewise.ai/threats/cve-2026-57425-wp-desk-autopay-dla-woocommerce-broken-access-control"},{"cve":"CVE-2026-57402","cvss":6.5,"slug":"cve-2026-57402-wpdesk-flexible-refund-and-return-order-for-woocommerce-stored","title":"wpdesk Flexible Refund and Return Order for WooCommerce Stored XSS","severity":"medium","exploited":false,"published_at":"2026-07-13T10:16:33.833+00:00","url":"https://junglewise.ai/threats/cve-2026-57402-wpdesk-flexible-refund-and-return-order-for-woocommerce-stored"}],"vendor":{"hub":true,"name":"WP Desk","slug":"wp-desk","homepage":"https://www.wpdesk.net/","description":"A developer of plugins for the WordPress content management system.","url":"https://junglewise.ai/threats/vendors/wp-desk"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-116861","cvss":7.5,"slug":"cve-2026-116861-unauthenticated-sensitive-data-exposure-in-flexible-chat-1-1-0","title":"Flexible Chat sensitive data exposure","severity":"high","exploited":false,"published_at":"2026-10-30T19:18:15.427+00:00","url":"https://junglewise.ai/threats/cve-2026-116861-unauthenticated-sensitive-data-exposure-in-flexible-chat-1-1-0"},{"cve":"CVE-2026-57425","cvss":6.5,"slug":"cve-2026-57425-wp-desk-autopay-dla-woocommerce-broken-access-control","title":"WP Desk Autopay dla WooCommerce broken access control","severity":"medium","exploited":false,"published_at":"2026-07-23T12:18:28.683+00:00","url":"https://junglewise.ai/threats/cve-2026-57425-wp-desk-autopay-dla-woocommerce-broken-access-control"},{"cve":"CVE-2026-57402","cvss":6.5,"slug":"cve-2026-57402-wpdesk-flexible-refund-and-return-order-for-woocommerce-stored","title":"wpdesk Flexible Refund and Return Order for WooCommerce Stored XSS","severity":"medium","exploited":false,"published_at":"2026-07-13T10:16:33.833+00:00","url":"https://junglewise.ai/threats/cve-2026-57402-wpdesk-flexible-refund-and-return-order-for-woocommerce-stored"},{"cve":"CVE-2026-92425","cvss":5.5,"epss":0.0031,"slug":"cve-2026-92425-the-hydra-booking-appointment-scheduling-booking-calendar","title":"Hydra Booking insecure direct object reference in host management","severity":"medium","exploited":false,"published_at":"2026-09-19T07:16:34.1+00:00","url":"https://junglewise.ai/threats/cve-2026-92425-the-hydra-booking-appointment-scheduling-booking-calendar"},{"cve":"CVE-2026-62081","cvss":5.4,"slug":"cve-2026-62081-contributor-insecure-direct-object-references-idor-in-flexible","title":"Flexible PDF Coupons IDOR in contributor functions","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:19.453+00:00","url":"https://junglewise.ai/threats/cve-2026-62081-contributor-insecure-direct-object-references-idor-in-flexible"},{"cve":"CVE-2026-62136","cvss":5.3,"epss":0.0029,"slug":"cve-2026-62136-wp-desk-flexible-quantity-measurement-price-calculator-broken","title":"WP Desk Flexible Quantity , Measurement Price Calculator broken access control","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.01+00:00","url":"https://junglewise.ai/threats/cve-2026-62136-wp-desk-flexible-quantity-measurement-price-calculator-broken"},{"cve":"CVE-2026-106605","cvss":5.3,"epss":0.0019,"slug":"cve-2026-106605-improper-validation-of-specified-quantity-in-input-vulnerability","title":"WP Desk Flexible Quantity Calculator improper input validation","severity":"medium","exploited":false,"published_at":"2026-10-12T08:17:18.18+00:00","url":"https://junglewise.ai/threats/cve-2026-106605-improper-validation-of-specified-quantity-in-input-vulnerability"},{"cve":"CVE-2026-121571","cvss":5.3,"slug":"cve-2026-121571-missing-authorization-vulnerability-in-wp-desk-autopay-dla","title":"WP Desk Autopay dla WooCommerce access control bypass","severity":"medium","exploited":false,"published_at":"2026-11-07T11:17:00.333+00:00","url":"https://junglewise.ai/threats/cve-2026-121571-missing-authorization-vulnerability-in-wp-desk-autopay-dla"},{"cve":"CVE-2026-116856","cvss":5.3,"slug":"cve-2026-116856-missing-authorization-vulnerability-in-wp-desk-flexible-quantity","title":"WP Desk Flexible Quantity , Measurement Price Calculator broken access control","severity":"medium","exploited":false,"published_at":"2026-10-29T15:17:20.433+00:00","url":"https://junglewise.ai/threats/cve-2026-116856-missing-authorization-vulnerability-in-wp-desk-flexible-quantity"},{"cve":"CVE-2026-115601","cvss":5.3,"slug":"cve-2026-115601-missing-authorization-vulnerability-in-wp-desk-custom-price-for","title":"WP Desk Custom Price for WooCommerce broken access control","severity":"medium","exploited":false,"published_at":"2026-10-29T15:17:17.08+00:00","url":"https://junglewise.ai/threats/cve-2026-115601-missing-authorization-vulnerability-in-wp-desk-custom-price-for"}],"generated_at":"2026-11-12T03:07:00.164048+00:00","technologies":[{"name":"WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce","slug":"flexible-quantity-measurement-price-calculator-for-woocommerce","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/flexible-quantity-measurement-price-calculator-for-woocommerce"}]}