CVE-2026-93528

Published Sep 23, 2026·Updated Sep 23, 2026

NVD Description

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.

Public Exploits & PoCs1 found

[POC] CVE-2026-93528 — CVE-2026-93528

Technical details, proof of concept, and responsible disclosure timeline for CVE-2026-93528 (Unauthenticated Order Data Disclosure in NP Quote Request for WooCommerce).

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free