← Back

CVE-2024-13558

nvd nist
Published: Mar 20, 2025Modified: Mar 27, 2025

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests.

Affected (1)

Neahplugins
1 product
Np Quote Request For Woocommerce
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Np Quote Request For Woocommerce
Before 1.9.180

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (3)

Source: security@wordfence.com
Patch
Source: security@wordfence.com
Product
Source: security@wordfence.com
Third Party Advisory

Timeline

No history available yet.