PT-2026-113658
CVE-2026-105969
·
Published
2026-10-14
·
Updated
2026-10-14
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
CodeAtoZ B2B Suite for WooCommerce WordPress plugin versions prior to 1.6.1
Description
Insufficient access restrictions for guest-submitted quotes allow unauthenticated users to retrieve sensitive information belonging to other guests. By providing an enumerable identifier, an attacker can access the buyer's name, email address, and requested line items.
Recommendations
Update the plugin to version 1.6.1 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾