cbcvebase.

Addify Request A Quote For Woocommerce vulnerabilities

1 known vulnerability affecting addify/request_a_quote_for_woocommerce.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-18143P1CRITICALCVSS 9.8ExploitedPoC≤ 2.9.22026-09-26
CVE-2026-18143 [CRITICAL] CWE-434 CVE-2026-18143: The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in a The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_submit_quote_via_popup()` function. This is due to missing file extension and MIME type validation in the popup upload handler, which uses the raw attacker-supplied filename directly as the dest
nvd
Addify Request A Quote For Woocommerce vulnerabilities | cvebase