Live › vulnerability › CVE-2026-116856
Flexible Quantity – Measurement Price Calculator for WooCommerce, a WordPress plugin, is missing an authorization check, so some actions are not properly restricted to authorized users. The sources do not state exactly which action an attacker can perform or what data they gain.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running the WooCommerce add-on Flexible Quantity – Measurement Price Calculator at version 2.3.24 or older are affected. The sources do not say which configuration or user role is needed to trigger the flaw, so teams without this plugin can skip it.
No product ranges from the sources yet.
2.3.24 or older.2.3.24; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement Price Calculator for WooCommerce: from n/a through 2.3.24.
This page as .md · .json · in your agent: get_signal("CVE-2026-116856")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.