CVE-2026-116856
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin (up to version 2.3.24) has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may perform actions requiring higher privileges.
Risk Assessment
An attacker could bypass access controls and modify product pricing or quantity configurations in the WooCommerce store, potentially leading to financial losses or incorrect orders. The risk affects e-commerce data integrity.
Recommendation
Update the Flexible Quantity plugin to the latest version (above 2.3.24). Verify user permissions and restrict access to store administrative functions.
Other vulnerabilities in Flexible Quantity – Measurement Price Calculator for WooCommerce
See all- CVE-2026-110364Medium
The WooCommerce plugin 'Flexible Quantity – Measurement Price Calculator' (versions up to 2.3.23) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
- CVE-2026-106605Medium
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin (up to version 2.3.22) contains an Improper Validation of Specified Quantity in Input vulnerability that allows input data manipulation. An attacker may supply invalid quantity values, potentially leading to incorrect price or product quantity calculations.
- CVE-2026-62136Medium
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin in versions up to and including 2.3.21 contains a Broken Access Control vulnerability exploitable by an unauthenticated attacker. This allows operations beyond granted permissions.
Original NVD description (English source)
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement Price Calculator for WooCommerce: from n/a through 2.3.24.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS