Request A Quote – Quote Forms For Any Wordpress Site
Approved changes feed: RSS · Atom
cpe:2.3:a:emarket-design:request_a_quote_–_quote_forms_for_any_wordpress_site:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Emarket Design (8fb61feb-3a38-520b-9ec4-c08f2531594e) |
|---|---|
| Product | Request A Quote – Quote Forms For Any Wordpress Site (ca2eddae-ea39-5163-87e1-236e11ea8b08) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14249 |
vulnerable | 2026-07-29 00:26:16.890877 |
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter
HIGH (7.5)
The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the emd_delete_file AJAX action. This is due to the emd_delete_file() handler deriving a PHP function name from the attacker-controlled $_POST['path'] parameter and invoking it dynamically via the variable-function call $sess_name(), and the handler being registered for wp_ajax_nopriv with its only protection being a nonce that the plugin prints into the public quote-form page via wp_localize_script. This makes it possible for unauthenticated attackers to invoke arbitrary zero-argument PHP functions on the server, such as phpinfo(), potentially exposing sensitive server configuration and credentials, or executing other destructive built-in PHP functions.
Published: 2026-07-02T05:35:06.954Z
Updated: 2026-07-02T15:03:09.103Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.