The vulnerability allows improper validation of the quantity input in the WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin. An attacker could manipulate the quantity parameter, leading to inaccurate pricing calculations and potential financial loss for merchants. This is a classic data manipulation weakness that can compromise the integrity of transaction data.

The affected product is WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce, version 2.3.22 and earlier. No further version granularity is provided.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting limited known exploitation. Based on the description, the attack vector is inferred to be a remote HTTP request to the WooCommerce site. Given the lack of advanced exploitation prerequisites, the risk is moderate but still warrants timely action.