CVE-2026-106605: Improper Validation of Specified Quantity in Input in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce

The vulnerability identified as CVE-2026-106605 concerns improper validation of specified quantity input in the WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce plugin. This flaw allows an attacker to manipulate input data related to quantity specification. The affected versions include all releases prior to 2.3.23. The CVSS v3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with an integrity impact.

The vulnerability allows an attacker to manipulate input data related to quantity specification, potentially leading to integrity issues such as incorrect pricing or quantity calculations within the WooCommerce environment. There is no indication of confidentiality or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or fix information is provided, users should monitor official WP Desk communications for updates and apply any forthcoming patches promptly.