CVE-2026-62136 is a MEDIUM-severity vulnerability in Flexible Quantity – Measurement Price Calculator for WooCommerce plugin versions <= 2.3.21. It allows unauthenticated Broken Access Control, potentially impacting site integrity. The vulnerability could allow attackers to access sensitive calculator functionality without proper authorization, which may lead to data integrity issues. Defenders should ass [truncated]
CVE-2026-57402 is a Stored XSS vulnerability in Flexible Refund and Return Order for WooCommerce. The issue affects Flexible Refund and Return Order for WooCommerce from n/a through <= 1.0.51. This vulnerability has a CVSS score of 6.5 and a severity of MEDIUM. The vulnerability is caused by improper neutralization of input during web page generation, also known as Cross-site Scripting (XSS). The vulnerab [truncated]
