Security
Loading…

CVE-2026-93528

LOWCVSS 3.7
View on NVD← Back to search
Description

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.

Timeline
Published:September 23rd, 2026 6:17 AM
Last modified:September 23rd, 2026 6:12 PM
CVSS Scoring

CVSS v3: 3.7 (LOW)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)
CWE-200
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute