NP Quote Request for WooCommerce Insecure Direct Object Reference Vulnerability

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in the NP Quote Request for WooCommerce plugin for WordPress, affecting all versions through 1.9.179. The vulnerability arises from inadequate validation of user-controlled keys, enabling unauthenticated attackers to access and read the content of quote requests.

Impact

Exploitation of this vulnerability allows unauthorized users to read the contents of quote requests, potentially leading to unauthorized access to sensitive information.