What is GHSA-7j8g-qcr9-g32j?

GHSA-7j8g-qcr9-g32j is a security advisory published by GitHub Security Advisories with Low severity. The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order...

Which CVE IDs does GHSA-7j8g-qcr9-g32j cover?

GHSA-7j8g-qcr9-g32j covers the following CVE IDs: CVE-2026-93528. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7j8g-qcr9-g32j?

GHSA-7j8g-qcr9-g32j has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-7j8g-qcr9-g32jLowCVSS 3.7

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-93528 →

📋 Description

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-93528
https://wpscan.com/vulnerability/f691b9cc-7d17-4308-9646-db842d99f63f
https://github.com/advisories/GHSA-7j8g-qcr9-g32j