OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-93528

LOW · CVSS 3.7 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The NP Quote Request for WooCommerce plugin for WordPress prior to version 2.4.16 is vulnerable due to a lack of order ownership verification, enabling unauthenticated attackers to access and view details of other customers' orders using their order keys. While the severity is rated low (CVSS 3.7), this vulnerability could lead to unauthorized exposure of sensitive customer information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential privacy risks.

CVE
CVE-2026-93528
Severity
LOW
CVSS
3.7
EPSS
0.22%
WordPress

Original NVD Description

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.