Lucene search
K

4 matches found

NVD
NVD
added 2025/03/20 12:15 p.m.11 views

CVE-2024-13558

The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests...

7.5CVSS0.00148EPSS
Exploits0References3
OSV
OSV
added 2025/03/20 12:15 p.m.2 views

CVE-2024-13558

The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests...

5.3CVSS7.3AI score
Exploits0References3
CVE
CVE
added 2025/03/20 11:11 a.m.51 views

CVE-2024-13558

CVE-2024-13558 affects the NP Quote Request for WooCommerce plugin (WordPress). The vulnerability is an Insecure Direct Object Reference caused by missing validation on a user-controlled key, affecting all versions up to 1.9.179. It allows unauthenticated attackers to read the content of quote re...

7.5CVSS7.4AI score0.00148EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2025/03/20 2:48 a.m.3 views

WordPress NP Quote Request for WooCommerce plugin <= 1.9.179 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability discovered by Tim Coen in WordPress Plugin NP Quote Request for WooCommerce versions = 1.9.179...

7.5CVSS8.5AI score0.00148EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder