CVE-2026-110364: Missing Authorization in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce

This vulnerability involves missing authorization checks in the WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce plugin, versions prior to 2.3.24. Due to incorrect access control configuration, unauthorized users may exploit this flaw to perform actions that should require authorization. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact, and no availability impact.

The vulnerability allows unauthorized modification of data (integrity impact) without requiring privileges or user interaction. There is no impact on confidentiality or availability. This could lead to unauthorized changes in pricing calculations or quantities within the WooCommerce plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's administrative functions and monitor for suspicious activity related to pricing or quantity modifications.