CVE-2024-13558

Published: 2025-03-20T12:15Z

Last Modified: 2025-03-27T15:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt