Request A Quote (Unknown) - vulnerabilities (CVEs)

6 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-02. Vendor: Unknown.

CVEs of Request A Quote

• CVE-2026-90988 - CVSS 5.3 (medium), 2026-10-02: The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing…
• CVE-2024-6231 - CVSS 5.9 (medium), 2024-07-23: The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2022-2240 - CVSS 8.8 (high), 2022-07-25: The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a…
• CVE-2022-2239 - CVSS 4.8 (medium), 2022-07-25: The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform…
• CVE-2021-24489 - CVSS 4.8 (medium), 2021-10-25: The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated…
• CVE-2021-24420 - CVSS 5.4 (medium), 2021-07-12: The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored…