Approved changes feed: RSS · Atom

cpe:2.3:a:wpbean:request_a_quote_for_woocommerce_–_get_a_quote_button:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpbean (6085ea97-8f69-59f7-b759-7e57789ae806)
ProductRequest A Quote For Woocommerce – Get A Quote Button (b389c757-5fa9-5196-99a2-bee1b8a6f14a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11034 vulnerable 2026-06-08 06:23:48.539250 Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form
HIGH (7.3)
The The Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation plugin for WordPress is vulnerable to arbitrary shortcode execution via fire_contact_form AJAX action in all versions up to, and including, 1.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Published: 2024-11-23T11:23:16.004Z
Updated: 2026-04-08T16:47:32.862Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.