CVE-2026-105969 CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure

The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable...

WordPress CodeAtoZ B2B Suite for WooCommerce plugin < 1.6.1 - Unauthenticated Guest Quote Disclosure vulnerability

Unauthenticated Guest Quote Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin CodeAtoZ B2B Suite for WooCommerce versions 1.6.1...

CVE-2026-105969

The CodeAtoZ B2B Suite for WooCommerce WordPress plugin (versions before 1.6.1 ) contains a vulnerability that fails to properly restrict access to guest-submitted quotes. An unauthenticated user can retrieve another guest's quote by providing an enumerable identifier . The disclosed information ...