Vendor

Addify

1 brief RSS

Arbitrary File Upload Vulnerability in Request a Quote for WooCommerce

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions 2.9.2 and below, allowing remote attackers to upload executable PHP files.

PoC Request a Quote for WooCommerce wordpress arbitrary-file-upload remote-code-execution cve-2026-18143

1r 2t 1c 2h ago