CVE-2026-110364: WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement Price Calculator for WooCommerce: from n/a through 2.3.23.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
flexible-quantity-measurement-price-calculator-for-woocommerceto a version that resolves this vulnerability.Fixed in 2.3.24
Event History
Frequently Asked Questions
Which plugin versions are affected?
The issue affects WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce versions through 2.3.23. The supplied data does not identify a fixed version.
Does exploitation require authentication or user interaction?
No. The provided CVSS vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected security impact?
The supplied severity vector indicates an integrity impact only; confidentiality and availability impacts are listed as none.