plugin

Wpheka Request For Quote Vulnerabilities

1 known security issue reported for the Wpheka Request For Quote WordPress plugin. Most recent disclosed Jul 5, 2021.

1 high

Running Wpheka Request For Quote on your site? Check whether your installed version is affected.

Scan your site free

Request for Quote < 1.3 - Cross-Site Request Forgery

high

The Request for Quote plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 1.3. This is due to missing or incorrect nonce validation in the action_wpheka_add_to_quote and action_remove_item_from_rfq_list AJAX actions. This makes it possible for unauthenticated attackers to perform restric...

CVSS:: 8.8
Affected:: up to 1.3
Fixed in:: 1.3
Disclosed:: Jul 5, 2021

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database