CVE-2026-106605
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin (up to version 2.3.22) contains an Improper Validation of Specified Quantity in Input vulnerability that allows input data manipulation. An attacker may supply invalid quantity values, potentially leading to incorrect price or product quantity calculations.
Risk Assessment
An organization using this plugin may be exposed to data manipulation, potentially resulting in order errors or incorrect charge calculations. This could lead to financial losses or customer dissatisfaction.
Recommendation
Update the Flexible Quantity – Measurement Price Calculator for WooCommerce plugin to the latest version that fixes this vulnerability. If an update is not possible, consider disabling the plugin until a patch is released.
Other vulnerabilities in Flexible Quantity – Measurement Price Calculator for WooCommerce
See all- CVE-2026-110364Medium
The WooCommerce plugin 'Flexible Quantity – Measurement Price Calculator' (versions up to 2.3.23) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
- CVE-2026-62136Medium
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin in versions up to and including 2.3.21 contains a Broken Access Control vulnerability exploitable by an unauthenticated attacker. This allows operations beyond granted permissions.
Original NVD description (English source)
Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Input Data Manipulation.This issue affects Flexible Quantity – Measurement Price Calculator for WooCommerce: from n/a through 2.3.22.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS