CVE-2026-93528:詳細資料

CVE-2026-93528

2026-09-23
06h00 +00:00
2026-09-23
10h50 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.

CVE 資訊

參考資料

https://wpscan.com/vulnerability/f691b9cc-7d17-4308-9646-db842d99f63f/
Tags : exploit, vdb-entry, technical-description