wpdesk Vulnerabilities and Affected Products
Vulnerabilities associated with Flexible PDF Invoices for WooCommerce & WordPress.
Products
Clear product- Flexible Refund and Return Order for WooCommerce3 vulnerabilities
- Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later2 vulnerabilities
- ShopMagic2 vulnerabilities
- Autopay dla WooCommerce1 vulnerability
- Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager1 vulnerability
- Flexible Cookies1 vulnerability
- Flexible PDF Coupons1 vulnerability
- Flexible PDF Invoices for WooCommerce & WordPress1 vulnerability
- flexible_checkout_fields1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-57977HIGH | WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) VulnerabilityCross-Site Request Forgery (CSRF) vulnerability in wpdesk Flexible PDF Invoices for WooCommerce & WordPress flexible-invoices allows Cross Site Request Forgery.This issue affects Flexible PDF Invoices for WooCommerce & WordPress: from n/a through <= 6.0.13. CWE-352Sep 22, 2025 | CVSS7.1v3.1 | EPSS0.144% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |