Vulnerabilities > Wpdesk

DATE CVE VULNERABILITY TITLE RISK
2025-02-18 CVE-2024-13718 Cross-Site Request Forgery (CSRF) vulnerability in Wpdesk Flexible Wishlist for Woocommerce
The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.26.
network
low complexity
wpdesk CWE-352
4.3
2024-06-09 CVE-2024-31267 Unspecified vulnerability in Wpdesk Flexible Checkout Fields
Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
network
low complexity
wpdesk
8.8
2023-06-07 CVE-2020-36731 Cross-site Scripting vulnerability in Wpdesk Flexible Checkout Fields for Woocommerce
The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1.
network
low complexity
wpdesk CWE-79
6.1