Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-95602 EUVD-2026-85505GHSA-q9qv-wpxv-x8rp

WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1.

Affected products

VendorProductAffectedFixed
YITH YITH WooCommerce Request A Quote < 4.46.1 4.46.1

References