Description
The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gplsaver | NP Quote Request for WooCommerce | ≤ 1.9.179 | — |