CVE-2026-105969
CVE-2026-105969 · CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable identifier.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
codeatoz b2b suite for woocommerce
- Versions
- ≥ 0, < 1.6.1: Affected (semver)
Update to 1.6.1