No recent security news found for Wpdesk.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-69093 PoC | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.04% | 2025-12-30 |
| CVE-2025-59578 PoC | 5.8 MEDIUM | PATCH UNDER REVIEW | 0.04% | 2025-10-22 |
| CVE-2025-57977 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.04% | 2025-09-22 |
| CVE-2025-30805 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.24% | 2025-03-27 |
| CVE-2025-22825 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-01-21 |
| CVE-2024-6570 PoC | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.56% | 2024-07-16 |
Wpdesk is a Polish software company specializing in WordPress plugins, particularly for e-commerce, shipping, and warehouse management. Their products, such as the Flexible Shipping plugin, are widely used by WooCommerce stores, making them a relevant target for supply chain vulnerabilities. The company has 6 tracked CVEs, primarily related to cross-site scripting and SQL injection in their plugins.
Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.