CVE-2026-106605: WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability
Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Input Data Manipulation.This issue affects Flexible Quantity – Measurement Price Calculator for WooCommerce: from n/a through 2.3.22.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerceto a version that resolves this vulnerability.Fixed in 2.3.23
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction. An unauthenticated remote attacker can potentially manipulate quantity input where the affected plugin processes it.
What versions are affected?
Flexible Quantity – Measurement Price Calculator for WooCommerce is affected through version 2.3.22. The supplied data does not identify a fixed version.
What is the likely impact?
The reported impact is limited to integrity, with no stated confidentiality or availability impact. The issue is described as improper validation of specified quantity input, allowing input data manipulation.
How should organizations prioritize mitigation?
Update to a version confirmed by the vendor to remediate the issue when one is available. If patching cannot be performed immediately, reduce exposure by limiting public access to affected WooCommerce purchasing functionality where operationally feasible and monitor quantity-related order and pricing activity for unexpected values.