The CVE-2026-107869 vulnerability affects WordPress Flexible Subscriptions plugin versions up to and including 1.8.4, allowing for Exploiting Incorrectly Configured Access Control Security Levels due to a Missing Authorization issue. This Medium-severity vulnerability, with a CVSS score of 4.3, requires verification of the plugin version, review of access controls, and enhanced monitoring. Site administra [truncated]
CVE-2026-106605 is a vulnerability in the WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin, affecting versions up to 2.3.22. The issue is related to improper validation of specified quantity in input, allowing for input data manipulation. This vulnerability requires verification and potential updates to prevent input data manipulation. Defenders responsible for WordPress i [truncated]
