low3.7
CVE-2026-93528
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticat…
Impact
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.
Affected products
| Product | Affected versions |
|---|---|
| NP Quote Request For WooCommerce WordPress Plugin | before 2.4.16 |
Versions were read from the advisory text. No structured product data has been published for this record yet.